Project: KICS (Provisioning / Security & Compliance)
File: dockercompose-queries.md

This page contains all queries from DockerCompose. | Query |Severity|Category|More info| ||--|--|--| |Docker Socket Mounted In Container<br/><sup><sub>d6355c88-1e8d-49e9-b2f2-f8a1ca12c75b</sub></sup>|<span style="color:#bb2124">High</span>|Build Process|<a href="../dockercompose-queries/d6355c88-1e8d-49e9-b2f2-f8a1ca12c75b" target="_blank">Query details</a><br><a href="https://docs.docker.com/compose/compose-file/#volumes">Documentation</a><br/>| |Volume Has Sensitive Host Directory<br/><sup><sub>1c1325ff-831d-43a1-973e-839ae57dfcc0</sub></sup>|<span style="color:#bb2124">High</span>|Build Process|<a href="../dockercompose-queries/1c1325ff-831d-43a1-973e-839ae57dfcc0" target="_blank">Query details</a><br><a href="https://docs.docker.com/compose/compose-file/compose-file-v3/#volume-configuration-reference">Documentation</a><br/>| |Volume Mounted In Multiple Containers<br/><sup><sub>baa452f0-1f21-4a25-ace5-844e7a5f410d</sub></sup>|<span style="color:#bb2124">High</span>|Build Process|<a href="../dockercompose-queries/baa452f0-1f21-4a25-ace5-844e7a5f410d" target="_blank">Query details</a><br><a href="https://docs.docker.com/compose/compose-file/compose-file-v3/#volumes">Documentation</a><br/>| |No New Privileges Not Set<br/><sup><sub>27fcc7d6-c49b-46e0-98f1-6c082a6a2750</sub></sup>|<span style="color:#bb2124">High</span>|Resource Management|<a href="../dockercompose-queries/27fcc7d6-c49b-46e0-98f1-6c082a6a2750" target="_blank">Query details</a><br><a href="https://docs.docker.com/engine/reference/run/#security-configuration">Documentation</a><br/>| |Privileged Containers Enabled<br/><sup><sub>ae5b6871-7f45-42e0-bb4c-ab300c4d2026</sub></sup>|<span style="color:#bb2124">High</span>|Resource Management|<a href="../dockercompose-queries/ae5b6871-7f45-42e0-bb4c-ab300c4d2026" target="_blank">Query details</a><br><a href="https://docs.docker.com/compose/compose-file/#privileged">Documentation</a><br/>| |Healthcheck Not Set<br/><sup><sub>698ed579-b239-4f8f-a388-baa4bcb13ef8</sub></sup>|<span style="color:#ff7213">Medium</span>|Availability|<a href="../dockercompose-queries/698ed579-b239-4f8f-a388-baa4bcb13ef8" target="_blank">Query details</a><br><a href="https://docs.docker.com/compose/compose-file/compose-file-v3/#healthcheck">Documentation</a><br/>| |Cgroup Not Default<br/><sup><sub>4d9f44c6-2f4a-4317-9bb5-267adbea0232</sub></sup>|<span style="color:#ff7213">Medium</span>|Build Process|<a href="../dockercompose-queries/4d9f44c6-2f4a-4317-9bb5-267adbea0232" target="blank">Query details</a><br><a href="https://docs.docker.com/compose/compose-file/compose-file-v3/#cgroupparent">Documentation</a><br/>| |Restart Policy On Failure Not Set To 5<br/><sup><sub>2fc99041-ddad-49d5-853f-e35e70a48391</sub></sup>|<span style="color:#ff7213">Medium</span>|Build Process|<a href="../dockercompose-queries/2fc99041-ddad-49d5-853f-e35e70a48391" target="_blank">Query details</a><br><a href="https://docs.docker.com/config/containers/start-containers-automatically/#use-a-restart-policy">Documentation</a><br/>| |Container Traffic Not Bound To Host Interface<br/><sup><sub>451d79dc-0588-476a-ad03-3c7f0320abb3</sub></sup>|<span style="color:#ff7213">Medium</span>|Networking and Firewall|<a href="../dockercompose-queries/451d79dc-0588-476a-ad03-3c7f0320abb3" target="_blank">Query details</a><br><a href="https://docs.docker.com/compose/compose-file/compose-file-v3/#ports">Documentation</a><br/>| |Privileged Ports Mapped In Container<br/><sup><sub>bc2908f3-f73c-40a9-8793-c1b7d5544f79</sub></sup>|<span style="color:#ff7213">Medium</span>|Networking and Firewall|<a href="../dockercompose-queries/bc2908f3-f73c-40a9-8793-c1b7d5544f79" target="blank">Query details</a><br><a href="https://docs.docker.com/compose/compose-file/compose-file-v3/#capadd-cap_drop">Documentation</a><br/>| |Container Capabilities Unrestricted<br/><sup><sub>ce76b7d0-9e77-464d-b86f-c5c48e03e22d</sub></sup>|<span style="color:#ff7213">Medium</span>|Resource Management|<a href="../dockercompose-queries/ce76b7d0-9e77-464d-b86f-c5c48e03e22d" target="blank">Query details</a><br><a href="https://docs.docker.com/compose/compose-file/compose-file-v3/#capadd-cap_drop">Documentation</a><br/>| |Default Seccomp Profile Disabled<br/><sup><sub>404fde2c-bc4b-4371-9747-7054132ac953</sub></sup>|<span style="color:#ff7213">Medium</span>|Resource Management|<a href="../dockercompose-queries/404fde2c-bc4b-4371-9747-7054132ac953" target="blank">Query details</a><br><a href="https://docs.docker.com/compose/compose-file/compose-file-v3/#securityopt">Documentation</a><br/>| |Host Namespace is Shared<br/><sup><sub>4f31dd9f-2cc3-4751-9b53-67e4af83dac0</sub></sup>|<span style="color:#ff7213">Medium</span>|Resource Management|<a href="../dockercompose-queries/4f31dd9f-2cc3-4751-9b53-67e4af83dac0" target="_blank">Query details</a><br><a href="https://docs.docker.com/compose/compose-file/compose-file-v3/#pid">Documentation</a><br/>| |Memory Not Limited<br/><sup><sub>bb9ac4f7-e13b-423d-a010-c74a1bfbe492</sub></sup>|<span style="color:#ff7213">Medium</span>|Resource Management|<a href="../dockercompose-queries/bb9ac4f7-e13b-423d-a010-c74a1bfbe492" target="_blank">Query details</a><br><a href="https://docs.docker.com/compose/compose-file/compose-file-v3/#resources">Documentation</a><br/>| |Pids Limit Not Set<br/><sup><sub>221e0658-cb2a-44e3-b08a-db96a341d6fa</sub></sup>|<span style="color:#ff7213">Medium</span>|Resource Management|<a href="../dockercompose-queries/221e0658-cb2a-44e3-b08a-db96a341d6fa" target="blank">Query details</a><br><a href="https://docs.docker.com/compose/compose-file/compose-file-v3/#domainname-hostname-ipc-macaddress-privileged-readonly-shmsize-stdinopen-tty-user-workingdir">Documentation</a><br/>| |Security Opt Not Set<br/><sup><sub>610e266e-6c12-4bca-9925-1ed0cd29742b</sub></sup>|<span style="color:#ff7213">Medium</span>|Resource Management|<a href="../dockercompose-queries/610e266e-6c12-4bca-9925-1ed0cd29742b" target="blank">Query details</a><br><a href="https://docs.docker.com/compose/compose-file/compose-file-v3/#securityopt">Documentation</a><br/>| |Shared Host IPC Namespace<br/><sup><sub>baa3890f-bed7-46f5-ab8f-1da8fc91c729</sub></sup>|<span style="color:#ff7213">Medium</span>|Resource Management|<a href="../dockercompose-queries/baa3890f-bed7-46f5-ab8f-1da8fc91c729" target="blank">Query details</a><br><a href="https://docs.docker.com/compose/compose-file/compose-file-v3/#domainname-hostname-ipc-macaddress-privileged-readonly-shmsize-stdinopen-tty-user-workingdir">Documentation</a><br/>| |Shared Host Network Namespace<br/><sup><sub>071a71ff-f868-47a4-ac0b-3c59e4ab5443</sub></sup>|<span style="color:#ff7213">Medium</span>|Resource Management|<a href="../dockercompose-queries/071a71ff-f868-47a4-ac0b-3c59e4ab5443" target="blank">Query details</a><br><a href="https://docs.docker.com/compose/compose-file/compose-file-v3/#networkmode">Documentation</a><br/>| |Shared Host User Namespace<br/><sup><sub>8af7162d-6c98-482f-868e-0d33fb675ca8</sub></sup>|<span style="color:#ff7213">Medium</span>|Resource Management|<a href="../dockercompose-queries/8af7162d-6c98-482f-868e-0d33fb675ca8" target="blank">Query details</a><br><a href="https://docs.docker.com/compose/compose-file/compose-file-v3/#usernsmode">Documentation</a><br/>| |Cpus Not Limited<br/><sup><sub>6b610c50-99fb-4ef0-a5f3-e312fd945bc3</sub></sup>|<span style="color:#edd57e">Low</span>|Resource Management|<a href="../dockercompose-queries/6b610c50-99fb-4ef0-a5f3-e312fd945bc3" target="_blank">Query details</a><br><a href="https://docs.docker.com/compose/compose-file/compose-file-v3/#resources">Documentation</a><br/>| |Shared Volumes Between Containers<br/><sup><sub>8c978947-0ff6-485c-b0c2-0bfca6026466</sub></sup>|<span style="color:#5bc0de">Info</span>|Insecure Configurations|<a href="../dockercompose-queries/8c978947-0ff6-485c-b0c2-0bfca6026466" target="_blank">Query details</a><br><a href="https://docs.docker.com/compose/compose-file/compose-file-v3/#volumes">Documentation</a><br/>|