sh: <nil>: out of range (Synology NAS) #576

docker run --rm --net host --pid host --userns host --cap-add audit_control -e DOCKER_CONTENT_TRUST=$DOCKER_CONTENT_TRUST -v /etc:/etc:ro -v /var/lib:/var/lib:ro -v /var/run/docker.sock:/var/run/docker.sock:ro -v /usr/local/bin/docker:/usr/bin/docker:ro --label docker_bench_security docker/docker-bench-security

[INFO] 5.27  - Ensure docker commands always get the latest version of the image
sh: <nil>: out of range
sh: <nil>: out of range
sh: <nil>: out of range
sh: <nil>: out of range
sh: <nil>: out of range
sh: <nil>: out of range
sh: <nil>: out of range
sh: <nil>: out of range
sh: <nil>: out of range
sh: <nil>: out of range
sh: <nil>: out of range
sh: <nil>: out of range
sh: <nil>: out of range
sh: <nil>: out of range
sh: <nil>: out of range
sh: <nil>: out of range
sh: <nil>: out of range
sh: <nil>: out of range
sh: <nil>: out of range
sh: <nil>: out of range
sh: <nil>: out of range
sh: <nil>: out of range
sh: <nil>: out of range
sh: <nil>: out of range
sh: <nil>: out of range
sh: <nil>: out of range
sh: <nil>: out of range
sh: <nil>: out of range
sh: <nil>: out of range
sh: <nil>: out of range
[PASS] 5.28  - Ensure PIDs cgroup limit is used