CIS Ubuntu Linux 22.04 LTS Workstation L1 v1.0.0

Audit Details

Name: CIS Ubuntu Linux 22.04 LTS Workstation L1 v1.0.0

Updated: 4/22/2024

Authority: CIS

Plugin: Unix

Revision: 1.41

Estimated Item Count: 330

File Details

Filename: CIS_Ubuntu_22.04_LTS_v1.0.0_Workstation_L1.audit

Size: 1.22 MB

MD5: ce43316db19b95ab62138561a63ae3eb
SHA256: ab4046f54daeac93c50218586c06179e07dc56393e5a103b57a19f9463e8a5a0

Audit Changelog

 
Revision 1.41

Apr 22, 2024

Functional Update
  • 4.2.2.6 Ensure rsyslog is configured to send logs to a remote log host
  • 5.4.5 Ensure all current passwords uses the configured hashing algorithm
Revision 1.40

Mar 20, 2024

Functional Update
  • 4.1.4.4 Ensure the audit log directory is 0750 or more restrictive
Revision 1.39

Mar 18, 2024

Functional Update
  • 3.1.1 Ensure system is checked to determine if IPv6 is enabled
  • 5.2.2 Ensure permissions on SSH private host key files are configured
Added
  • 4.2.3 Ensure all logfiles have appropriate permissions and ownership
  • 5.2.12 Ensure SSH X11 forwarding is disabled
Removed
  • 4.2.3 Ensure all logfiles have appropriate access configured
Revision 1.38

Feb 5, 2024

Functional Update
  • 5.2.22 Ensure SSH Idle Timeout Interval is configured
Revision 1.37

Jan 22, 2024

Functional Update
  • 5.2.22 Ensure SSH Idle Timeout Interval is configured
Miscellaneous
  • Metadata updated.
Revision 1.36

Jan 3, 2024

Functional Update
  • 2.2.13 Ensure SNMP Server is not installed
Revision 1.35

Dec 27, 2023

Functional Update
  • 4.1.4.4 Ensure the audit log directory is 0750 or more restrictive
  • 4.2.1.1.1 Ensure systemd-journal-remote is installed
  • 4.2.1.1.2 Ensure systemd-journal-remote is configured
  • 4.2.1.1.3 Ensure systemd-journal-remote is enabled
  • 4.2.1.1.4 Ensure journald is not configured to receive logs from a remote client
  • 4.2.1.2 Ensure journald service is enabled
  • 4.2.1.3 Ensure journald is configured to compress large log files
  • 4.2.1.4 Ensure journald is configured to write logfiles to persistent disk
  • 4.2.1.5 Ensure journald is not configured to send logs to rsyslog
  • 4.2.1.6 Ensure journald log rotation is configured per site policy
  • 4.2.1.7 Ensure journald default file permissions configured
  • 4.2.2.1 Ensure rsyslog is installed
  • 4.2.2.2 Ensure rsyslog service is enabled
  • 4.2.2.3 Ensure journald is configured to send logs to rsyslog
  • 4.2.2.4 Ensure rsyslog default file permissions are configured
  • 4.2.2.5 Ensure logging is configured
  • 4.2.2.6 Ensure rsyslog is configured to send logs to a remote log host
  • 4.2.2.7 Ensure rsyslog is not configured to receive logs from a remote client
Revision 1.34

Dec 8, 2023

Functional Update
  • 4.2.1.1.1 Ensure systemd-journal-remote is installed
  • 4.2.1.1.2 Ensure systemd-journal-remote is configured
  • 4.2.1.1.3 Ensure systemd-journal-remote is enabled
  • 4.2.1.1.4 Ensure journald is not configured to receive logs from a remote client
  • 4.2.1.2 Ensure journald service is enabled
  • 4.2.1.3 Ensure journald is configured to compress large log files
  • 4.2.1.4 Ensure journald is configured to write logfiles to persistent disk
  • 4.2.1.5 Ensure journald is not configured to send logs to rsyslog
  • 4.2.1.6 Ensure journald log rotation is configured per site policy
  • 4.2.1.7 Ensure journald default file permissions configured
  • 4.2.2.1 Ensure rsyslog is installed
  • 4.2.2.2 Ensure rsyslog service is enabled
  • 4.2.2.3 Ensure journald is configured to send logs to rsyslog
  • 4.2.2.4 Ensure rsyslog default file permissions are configured
  • 4.2.2.5 Ensure logging is configured
  • 4.2.2.6 Ensure rsyslog is configured to send logs to a remote log host
  • 4.2.2.7 Ensure rsyslog is not configured to receive logs from a remote client
Revision 1.33

Dec 6, 2023

Miscellaneous
  • Metadata updated.
Added
  • 2.1.4.3 Ensure ntp is running as user ntp - RUNASUSER
  • 2.1.4.3 Ensure ntp is running as user ntp - user
Revision 1.32

Nov 28, 2023

Miscellaneous
  • Variables updated.