Revision 1.1Aug 1, 2025

Functional Update
  • 5.2.2 Ensure permissions on SSH private host key files are configured
Informational Update
  • 1.1.2 Ensure /tmp is configured
  • 1.10 Ensure GDM is removed or login is configured
  • 2.2.1.3 Ensure chrony is configured
  • 2.2.1.4 Ensure ntp is configured
  • 5.2.13 Ensure only strong Ciphers are used
  • 5.2.14 Ensure only strong MAC algorithms are used
  • 5.2.16 Ensure SSH Idle Timeout Interval is configured
  • 5.3.2 Ensure lockout for failed password attempts is configured
  • 5.3.3 Ensure password reuse is limited
  • 5.4.4 Ensure default user shell timeout is configured
  • 5.4.5 Ensure default user umask is configured