CIS Ubuntu Linux 22.04 LTS Server L1 v1.0.0

Audit Details

Name: CIS Ubuntu Linux 22.04 LTS Server L1 v1.0.0

Updated: 4/22/2024

Authority: CIS

Plugin: Unix

Revision: 1.41

Estimated Item Count: 337

File Details

Filename: CIS_Ubuntu_22.04_LTS_v1.0.0_Server_L1.audit

Size: 1.25 MB

MD5: 06e4dfb52150c56f23e7a5c8ea6301f4
SHA256: 159577375a428453f3f20f53d995b555741a4463d40a2b0c459a3c70294f3576

Audit Changelog

 
Revision 1.41

Apr 22, 2024

Functional Update
  • 4.2.2.6 Ensure rsyslog is configured to send logs to a remote log host
  • 5.4.5 Ensure all current passwords uses the configured hashing algorithm
Revision 1.40

Mar 20, 2024

Functional Update
  • 4.1.4.4 Ensure the audit log directory is 0750 or more restrictive
Revision 1.39

Mar 18, 2024

Functional Update
  • 3.1.1 Ensure system is checked to determine if IPv6 is enabled
  • 5.2.2 Ensure permissions on SSH private host key files are configured
Added
  • 4.2.3 Ensure all logfiles have appropriate permissions and ownership
Removed
  • 4.2.3 Ensure all logfiles have appropriate access configured
Revision 1.38

Feb 5, 2024

Functional Update
  • 5.2.22 Ensure SSH Idle Timeout Interval is configured
Revision 1.37

Jan 22, 2024

Functional Update
  • 5.2.22 Ensure SSH Idle Timeout Interval is configured
Miscellaneous
  • Metadata updated.
Revision 1.36

Jan 3, 2024

Functional Update
  • 2.2.13 Ensure SNMP Server is not installed
Revision 1.35

Dec 27, 2023

Functional Update
  • 4.1.4.4 Ensure the audit log directory is 0750 or more restrictive
  • 4.2.1.1.1 Ensure systemd-journal-remote is installed
  • 4.2.1.1.2 Ensure systemd-journal-remote is configured
  • 4.2.1.1.3 Ensure systemd-journal-remote is enabled
  • 4.2.1.1.4 Ensure journald is not configured to receive logs from a remote client
  • 4.2.1.2 Ensure journald service is enabled
  • 4.2.1.3 Ensure journald is configured to compress large log files
  • 4.2.1.4 Ensure journald is configured to write logfiles to persistent disk
  • 4.2.1.5 Ensure journald is not configured to send logs to rsyslog
  • 4.2.1.6 Ensure journald log rotation is configured per site policy
  • 4.2.1.7 Ensure journald default file permissions configured
  • 4.2.2.1 Ensure rsyslog is installed
  • 4.2.2.2 Ensure rsyslog service is enabled
  • 4.2.2.3 Ensure journald is configured to send logs to rsyslog
  • 4.2.2.4 Ensure rsyslog default file permissions are configured
  • 4.2.2.5 Ensure logging is configured
  • 4.2.2.6 Ensure rsyslog is configured to send logs to a remote log host
  • 4.2.2.7 Ensure rsyslog is not configured to receive logs from a remote client
Revision 1.34

Dec 8, 2023

Functional Update
  • 4.2.1.1.1 Ensure systemd-journal-remote is installed
  • 4.2.1.1.2 Ensure systemd-journal-remote is configured
  • 4.2.1.1.3 Ensure systemd-journal-remote is enabled
  • 4.2.1.1.4 Ensure journald is not configured to receive logs from a remote client
  • 4.2.1.2 Ensure journald service is enabled
  • 4.2.1.3 Ensure journald is configured to compress large log files
  • 4.2.1.4 Ensure journald is configured to write logfiles to persistent disk
  • 4.2.1.5 Ensure journald is not configured to send logs to rsyslog
  • 4.2.1.6 Ensure journald log rotation is configured per site policy
  • 4.2.1.7 Ensure journald default file permissions configured
  • 4.2.2.1 Ensure rsyslog is installed
  • 4.2.2.2 Ensure rsyslog service is enabled
  • 4.2.2.3 Ensure journald is configured to send logs to rsyslog
  • 4.2.2.4 Ensure rsyslog default file permissions are configured
  • 4.2.2.5 Ensure logging is configured
  • 4.2.2.6 Ensure rsyslog is configured to send logs to a remote log host
  • 4.2.2.7 Ensure rsyslog is not configured to receive logs from a remote client
Revision 1.33

Dec 6, 2023

Miscellaneous
  • Metadata updated.
Added
  • 2.1.4.3 Ensure ntp is running as user ntp - RUNASUSER
  • 2.1.4.3 Ensure ntp is running as user ntp - user
Revision 1.32

Nov 28, 2023

Miscellaneous
  • Variables updated.