Detections
Analytics

Revision 1.1Jul 23, 2026

Functional Update
  • 5.7 Ensure access to the su command is restricted
Informational Update
  • 1.7.5 Ensure permissions on /etc/motd are configured
  • 1.7.6 Ensure permissions on /etc/issue are configured
  • 1.7.7 Ensure permissions on /etc/issue.net are configured
  • 2.2.1.2 Ensure chrony is configured
  • 2.2.1.3 Ensure ntp is configured
  • 2.2.3 Ensure Avahi Server is not installed
  • 3.2.1 Ensure IP forwarding is disabled
  • 3.3.8 Ensure Reverse Path Filtering is enabled
  • 3.5.1.5 Ensure firewalld default zone is set
  • 3.5.2.5 Ensure an nftables table exists
  • 3.5.2.6 Ensure nftables base chains exist
  • 3.5.2.9 Ensure nftables default deny firewall policy
  • 5.3.19 Ensure SSH Idle Timeout Interval is configured
  • 5.3.6 Ensure SSH access is limited
  • 5.4.2 Ensure lockout for failed password attempts is configured
  • 5.4.3 Ensure password hashing algorithm is SHA-512
  • 5.5.4 Ensure default user shell timeout is configured
  • 5.5.5 Ensure default user umask is configured
Miscellaneous
  • Metadata updated.
  • References updated.