Detections
Analytics

Revision 1.29

Dec 7, 2022
Functional Update
  • 2.12 Configure TCP Wrappers - inetadm tcp_wrapers = true
  • 3.10 Disable Response to Multicast Echo Request - current ipv4 = 0
  • 3.10 Disable Response to Multicast Echo Request - current ipv6 = 0
  • 3.10 Disable Response to Multicast Echo Request - persistent ipv4 = 0
  • 3.10 Disable Response to Multicast Echo Request - persistent ipv6 = 0
  • 3.11 Ignore ICMP Redirect Messages - current ipv4 = 1
  • 3.11 Ignore ICMP Redirect Messages - current ipv6 = 1
  • 3.11 Ignore ICMP Redirect Messages - persistent ipv4 = 1
  • 3.11 Ignore ICMP Redirect Messages - persistent ipv6 = 1
  • 3.12 Set Strict Multihoming - current ipv4 = 0
  • 3.12 Set Strict Multihoming - current ipv6 = 0
  • 3.12 Set Strict Multihoming - persistent ipv4 = 0
  • 3.12 Set Strict Multihoming - persistent ipv6 = 0
  • 3.13 Disable ICMP Redirect Messages - current ipv4 = 0
  • 3.13 Disable ICMP Redirect Messages - current ipv6 = 0
  • 3.13 Disable ICMP Redirect Messages - persistent ipv4 = 0
  • 3.13 Disable ICMP Redirect Messages - persistent ipv6 = 0
  • 3.14 Disable TCP Reverse IP Source Routing - current tcp = 0
  • 3.14 Disable TCP Reverse IP Source Routing - persistent tcp = 0
  • 3.15 Set Maximum Number of Half-open TCP Connections - current tcp = 4096
  • 3.15 Set Maximum Number of Half-open TCP Connections - persistent tcp = 4096
  • 3.16 Set Maximum Number of Incoming Connections - current tcp = 1024
  • 3.16 Set Maximum Number of Incoming Connections - persistent tcp = 1024
  • 3.4 Disable Source Packet Forwarding - current ipv4 = 0
  • 3.4 Disable Source Packet Forwarding - current ipv6 = 0
  • 3.4 Disable Source Packet Forwarding - persistent ipv4 = 0
  • 3.4 Disable Source Packet Forwarding - persistent ipv6 = 0
  • 3.5 Disable Directed Broadcast Packet Forwarding - current ip = 0
  • 3.5 Disable Directed Broadcast Packet Forwarding - persistent ip = 0
  • 3.6 Disable Response to ICMP Timestamp Requests - current ip = 0
  • 3.6 Disable Response to ICMP Timestamp Requests - persistent ip = 0
  • 3.7 Disable Response to ICMP Broadcast Timestamp Requests - current ip = 0
  • 3.7 Disable Response to ICMP Broadcast Timestamp Requests - persistent ip = 0
  • 3.8 Disable Response to ICMP Broadcast Netmask Requests - current ip = 0
  • 3.8 Disable Response to ICMP Broadcast Netmask Requests - persistent ip = 0
  • 3.9 Disable Response to Broadcast ICMPv4 Echo Request - current ip = 0
  • 3.9 Disable Response to Broadcast ICMPv4 Echo Request - persistent ip = 0
  • 4.1 Create CIS Audit Class
  • 4.5 Configure Solaris Auditing - audit condition = auditing
  • 4.5 Configure Solaris Auditing - audit_binfile (active)
  • 6.11 Remove Autologin Capabilities from the GNOME desktop
  • 6.12 Set Default Screen Lock for GNOME Users
  • 6.12 Set Default Screen Lock for GNOME Users - lock = true
  • 6.12 Set Default Screen Lock for GNOME Users - lockTimeout = 0
  • 6.12 Set Default Screen Lock for GNOME Users - timeout = 10
  • 6.16 Set EEPROM Security Mode and Log Failed Access (SPARC)
  • 6.16 Set EEPROM Security Mode and Log Failed Access (SPARC) - eeprom security-#badlogins = 0
  • 6.16 Set EEPROM Security Mode and Log Failed Access (SPARC) - eeprom security-mode = command
  • 6.17 Secure the GRUB Menu (Intel)
  • 6.17 Secure the GRUB Menu (Intel) - lock
  • 6.17 Secure the GRUB Menu (Intel) - menu.lst perms
  • 6.17 Secure the GRUB Menu (Intel) - password --md5
  • 7.6 Lock Inactive User Accounts - useradd -D, 35
  • 8.3 Enable a Warning Banner for the GNOME Service
Miscellaneous
  • Variables updated.