---
title: The /etc/docker directory permissions should be set to 755 or stricter
description: Datadog, the leading service for cloud-scale monitoring.
breadcrumbs: >-
  Docs > Datadog Security > OOTB Rules > The /etc/docker directory permissions
  should be set to 755 or stricter
---

> For the complete documentation index, see [llms.txt](https://docs.datadoghq.com/llms.txt).

# The /etc/docker directory permissions should be set to 755 or stricter
Classification:complianceFramework:cis-dockerControl:3.6 
## Description{% #description %}

The `/etc/docker` directory should have mode 755 or stricter.

## Rationale{% #rationale %}

`/etc/docker` holds `daemon.json` and the TLS certificates and keys of the Docker daemon. Mode 755 or stricter leaves only root able to write it.

## Audit{% #audit %}

Show the mode of `/etc/docker`:

```bash
stat -c '%a' /etc/docker
```

Datadog passes the rule when `/etc/docker` has mode 755 or stricter, fails it when the mode is less strict, and reports it not applicable when the path is absent.

## Remediation{% #remediation %}

Set the mode:

```bash
chmod 755 /etc/docker
```

## Impact{% #impact %}

None.

## Default value{% #default-value %}

Docker creates `/etc/docker` with owner root:root and mode 755.

## References{% #references %}

1. [https://docs.docker.com/engine/security/protect-access/](https://docs.docker.com/engine/security/protect-access/)