---
title: The /etc/sysconfig/docker file should be owned by the root account and group
description: Datadog, the leading service for cloud-scale monitoring.
breadcrumbs: >-
  Docs > Datadog Security > OOTB Rules > The /etc/sysconfig/docker file should
  be owned by the root account and group
---

> For the complete documentation index, see [llms.txt](https://docs.datadoghq.com/llms.txt).

# The /etc/sysconfig/docker file should be owned by the root account and group
Classification:complianceFramework:cis-dockerControl:3.22 
## Description{% #description %}

The `/etc/sysconfig/docker` file should be owned by user root and group root.

## Rationale{% #rationale %}

On RHEL and Amazon Linux, `/etc/sysconfig/docker` can set options of the Docker daemon. Its owner can change it, so the owner and group should be root only.

## Audit{% #audit %}

Show the owner and group of `/etc/sysconfig/docker`:

```bash
stat -c '%U:%G' /etc/sysconfig/docker
```

Datadog passes the rule when `/etc/sysconfig/docker` belongs to root:root, fails it when it belongs to another user or group, and reports it not applicable when the path is absent.

## Remediation{% #remediation %}

Set the owner and group:

```bash
chown root:root /etc/sysconfig/docker
```

## Impact{% #impact %}

None.

## Default value{% #default-value %}

The Amazon Linux package installs the file with owner root:root and mode 644.

## References{% #references %}

1. [https://docs.docker.com/engine/daemon/](https://docs.docker.com/engine/daemon/)