Revision 1.18

Functional Update

• 1.6.1.4 Ensure the SELinux mode is not disabled - getenforce
• 4.2.1.1 Ensure rsyslog is installed
• 4.2.1.2 Ensure rsyslog service is enabled
• 4.2.1.3 Ensure journald is configured to send logs to rsyslog
• 4.2.1.4 Ensure rsyslog default file permissions are configured
• 4.2.1.5 Ensure logging is configured
• 4.2.1.6 Ensure rsyslog is configured to send logs to a remote log host
• 4.2.1.7 Ensure rsyslog is not configured to receive logs from a remote client
• 5.4.1 Ensure custom authselect profile is used
• 5.6.1.2 Ensure minimum days between password changes is configured - login.defs
• 6.2.1 Ensure accounts in /etc/passwd use shadowed passwords
• 6.2.2 Ensure /etc/shadow password fields are not empty