Revision 1.4Jul 23, 2026

Informational Update
  • 1.1.1.6 Ensure overlay kernel module is not available
  • 1.1.1.7 Ensure squashfs kernel module is not available
  • 1.1.1.8 Ensure udf kernel module is not available
  • 1.3.1.5 Ensure the SELinux mode is enforcing
  • 1.3.1.6 Ensure no unconfined services exist
  • 1.5.3 Ensure fs.protected_symlinks is configured
  • 2.1.21 Ensure GNOME Display Manager is removed
  • 3.3.1.1 Ensure net.ipv4.ip_forward is configured
  • 5.4.1.2 Ensure minimum password days is configured
  • 6.3.3.13 Ensure file deletion events by users are collected
Miscellaneous
  • Platform check updated.
  • References updated.
Added
  • CIS_Rocky_Linux_8_v3.0.0_L2_Server.audit from CIS Rocky Linux 8 v3.0.0
Removed
  • CIS_Rocky_Linux_8_v3.0.0_L2_Server.audit from CIS Rocky Linux 8 3.0.0