Revision 1.13Feb 8, 2024
Functional Update
- 2.4 Ensure nonessential services are removed or masked
- 3.1.1 Ensure IPv6 status is identified
- 3.4.1.5 Ensure ufw outbound connections are configured
- 3.4.2.3 Ensure iptables are flushed with nftables
- 3.4.2.7 Ensure nftables outbound and established connections are configured
- 3.4.3.2.3 Ensure iptables outbound and established connections are configured
- 3.4.3.3.3 Ensure ip6tables outbound and established connections are configured
- 5.1.1.6 Ensure journald log rotation is configured per site policy
- 6.1.13 Ensure SUID and SGID files are reviewed
Informational Update
- 6.1.13 Ensure SUID and SGID files are reviewed