Examples not working about cis-docker-benchmark HOT 7 CLOSED

@Nutomic would you like to open a PR to improve it?

from cis-docker-benchmark.

here is the diff (though i'm not sure what container_capadd should be)

diff --git a/sample_attributes.yml b/sample_attributes.yml
index 8392f1c..c3cb15d 100644
--- a/sample_attributes.yml
+++ b/sample_attributes.yml
@@ -4,9 +4,10 @@ registry_cert_path: /etc/docker/certs.d
 registry_name: /etc/docker/certs.d/registry_hostname:port
 registry_ca_file: /etc/docker/certs.d/registry_hostname:port/ca.crt
 container_user: vagrant
-container_capadd: null
+container_capadd: NET_ADMIN,SYS_ADMIN
 authorization_plugin: authz-broker
 log_driver: syslog
 log_opts: /syslog-address/
 app_armor_profile: docker-default
 selinux_profile: /label\:level\:s0-s0\:c1023/
+benchmark_version: 1.12.0

from cis-docker-benchmark.

Hi @Nutomic thank you for the feedback. The project includes a sample attributes file and you can execute it via:

# run profile on remote host via SSH with sudo and define attribute value
inspec exec cis-docker-benchmark --attrs sample_attributes.yml

It is mentioned in the readme but maybe not prominent enough.

from cis-docker-benchmark.

Right, I only looked at the first examples for running locally, and there is not mention how I can pass the attributes. It worked now, but I still had to edit the sample file. Would be good if it worked out of the box.

from cis-docker-benchmark.

Sorry but I dont have the time.

from cis-docker-benchmark.

Would it be possible to share your updated attributes within this issue?

from cis-docker-benchmark.

fixed in #61

from cis-docker-benchmark.