Jul 23, 2026 Informational Update- 1.1.1.7 Ensure overlay kernel module is not available
- 1.1.1.8 Ensure squashfs kernel module is not available
- 1.1.1.9 Ensure udf kernel module is not available
- 1.3.1.6 Ensure the SELinux mode is enforcing
- 1.3.1.8 Ensure no unconfined services exist
- 1.5.2 Ensure fs.protected_symlinks is configured
- 5.1.24 Ensure sshd ListenAddress is configured
- 5.4.1.2 Ensure minimum password days is configured
- 6.2.3.1 Ensure modification of the /etc/sudoers file is collected
- 6.2.3.10 Ensure unsuccessful file access attempts are collected
- 6.2.3.11 Ensure events that modify /etc/group information are collected
- 6.2.3.12 Ensure events that modify /etc/passwd information are collected
- 6.2.3.13 Ensure events that modify /etc/shadow and /etc/gshadow are collected
- 6.2.3.14 Ensure events that modify /etc/security/opasswd are collected
- 6.2.3.15 Ensure events that modify /etc/pam.d/ information are collected
- 6.2.3.16 Ensure discretionary access control permission modification events chmod,fchmod,fchmodat,fchmodat2 are collected
- 6.2.3.17 Ensure discretionary access control permission modification events chown,fchown,lchown,fchownat are collected
- 6.2.3.18 Ensure discretionary access control permission modification events setxattr,lsetxattr,fsetxattr,removexattr,lremovexattr,fremovexattr collected
- 6.2.3.19 Ensure successful file system mounts are collected
- 6.2.3.2 Ensure actions as another user are always logged
- 6.2.3.20 Ensure session initiation information is collected
- 6.2.3.21 Ensure login and logout events are collected
- 6.2.3.22 Ensure unlink file deletion events by users are collected
- 6.2.3.23 Ensure rename file deletion events by users are collected
- 6.2.3.24 Ensure events that modify the system's Mandatory Access Controls are collected
- 6.2.3.25 Ensure successful and unsuccessful attempts to use the chcon command are collected
- 6.2.3.26 Ensure successful and unsuccessful attempts to use the setfacl command are collected
- 6.2.3.27 Ensure successful and unsuccessful attempts to use the chacl command are collected
- 6.2.3.28 Ensure successful and unsuccessful attempts to use the usermod command are collected
- 6.2.3.29 Ensure kernel module loading unloading and modification is collected
- 6.2.3.3 Ensure events that modify the sudo log file are collected
- 6.2.3.30 Ensure kernel \"init_module\" and \"finit_module\" loading unloading and modification is collected
- 6.2.3.31 Ensure kernel \"delete_module\" loading unloading and modification is collected
- 6.2.3.32 Ensure kernel \"create_module\" and \"query_module\" loading unloading and modification is collected
- 6.2.3.4 Ensure events that modify date and time information are collected
- 6.2.3.5 Ensure events that modify sethostname and setdomainname are collected
- 6.2.3.6 Ensure events that modify /etc/issue and /etc/issue.net are collected
- 6.2.3.7 Ensure events that modify /etc/hosts and /etc/hostname are collected
- 6.2.3.8 Ensure events that modify /etc/NetworkManager directory are collected
Miscellaneous- Platform check updated.
- References updated.
Added- CIS_SUSE_Linux_Enterprise_16_v1.0.0_L2_Server.audit from CIS SUSE Linux Enterprise 16 v1.0.0
Removed- CIS_SUSE_Linux_Enterprise_16_v1.0.0_L2_Server.audit from CIS SUSE Linux Enterprise 16 1.0.0
|
