AZLX-23-000100 - Amazon Linux 2023 local disk partitions must implement cryptographic mechanisms to prevent unauthorized disclosure or modification of all information that requires at rest protection.

CAT|I

CCI|CCI-001199

CCI|CCI-002475

CCI|CCI-002476

Rule-ID|SV-273994r1119970_rule

STIG-ID|AZLX-23-000100

Vuln-ID|V-273994

AZLX-23-000110 - Amazon Linux 2023 must ensure cryptographic verification of vendor software packages.

CAT|II

CCI|CCI-003992

Rule-ID|SV-273995r1119973_rule

STIG-ID|AZLX-23-000110

Vuln-ID|V-273995

AZLX-23-000115 - Amazon Linux 2023 must check the GPG signature of locally installed software packages before installation.

Rule-ID|SV-273996r1119976_rule

STIG-ID|AZLX-23-000115

Vuln-ID|V-273996

AZLX-23-000120 - Amazon Linux 2023 must check the GPG signature of software packages originating from external software repositories before installation.

Rule-ID|SV-273997r1119979_rule

STIG-ID|AZLX-23-000120

Vuln-ID|V-273997

AZLX-23-000125 - Amazon Linux 2023 must have GPG signature verification enabled for all software repositories.

Rule-ID|SV-273998r1119982_rule

STIG-ID|AZLX-23-000125

Vuln-ID|V-273998

AZLX-23-000130 - Amazon Linux 2023 must be a vendor-supported release.

CCI|CCI-002605

Rule-ID|SV-273999r1155171_rule

STIG-ID|AZLX-23-000130

Vuln-ID|V-273999

AZLX-23-000135 - Amazon Linux 2023 systemd-journald service must be enabled.

CCI|CCI-001665

Rule-ID|SV-274000r1119988_rule

STIG-ID|AZLX-23-000135

Vuln-ID|V-274000

AZLX-23-000200 - Amazon Linux 2023 must restrict access to the kernel message buffer.

CCI|CCI-001082

CCI|CCI-001090

Rule-ID|SV-274001r1119991_rule

STIG-ID|AZLX-23-000200

Vuln-ID|V-274001

AZLX-23-000205 - Amazon Linux 2023 must prevent kernel profiling by nonprivileged users.

Rule-ID|SV-274002r1119994_rule

STIG-ID|AZLX-23-000205

Vuln-ID|V-274002

AZLX-23-000210 - Amazon Linux 2023 must restrict exposed kernel pointer addresses access.

CCI|CCI-002824

Rule-ID|SV-274003r1119997_rule

STIG-ID|AZLX-23-000210

Vuln-ID|V-274003

AZLX-23-000215 - Amazon Linux 2023 must disable access to network bpf system call from nonprivileged processes.

Rule-ID|SV-274004r1120000_rule

STIG-ID|AZLX-23-000215

Vuln-ID|V-274004

AZLX-23-000220 - Amazon Linux 2023 must restrict usage of ptrace to descendant processes.

Rule-ID|SV-274005r1120003_rule

STIG-ID|AZLX-23-000220

Vuln-ID|V-274005

AZLX-23-000225 - Amazon Linux 2023 must implement address space layout randomization (ASLR) to protect its memory from unauthorized code execution.

Rule-ID|SV-274006r1120006_rule

STIG-ID|AZLX-23-000225

Vuln-ID|V-274006

AZLX-23-000300 - Amazon Linux 2023 must not have the vsftpd package installed.

CCI|CCI-000197

CCI|CCI-000381

Rule-ID|SV-274007r1120009_rule

STIG-ID|AZLX-23-000300

Vuln-ID|V-274007

AZLX-23-000305 - Amazon Linux 2023 must not have the sendmail package installed.

Rule-ID|SV-274008r1120012_rule

STIG-ID|AZLX-23-000305

Vuln-ID|V-274008

AZLX-23-000310 - Amazon Linux 2023 must not have the nfs-utils package installed.

Rule-ID|SV-274009r1120015_rule

STIG-ID|AZLX-23-000310

Vuln-ID|V-274009

AZLX-23-000315 - Amazon Linux 2023 must not have the telnet-server package installed.

Rule-ID|SV-274010r1120018_rule

STIG-ID|AZLX-23-000315

Vuln-ID|V-274010

AZLX-23-000320 - Amazon Linux 2023 must not have the gssproxy package installed.

Rule-ID|SV-274011r1120021_rule

STIG-ID|AZLX-23-000320

Vuln-ID|V-274011

AZLX-23-001000 - Amazon Linux 2023 must have the sudo package installed.

CCI|CCI-002235

Rule-ID|SV-274012r1120710_rule

STIG-ID|AZLX-23-001000

Vuln-ID|V-274012

AZLX-23-001005 - Amazon Linux 2023 must not be configured to bypass password requirements for privilege escalation.

CCI|CCI-002165

Rule-ID|SV-274013r1120027_rule

STIG-ID|AZLX-23-001005

Vuln-ID|V-274013

AZLX-23-001010 - Amazon Linux 2023 must require reauthentication when using the "sudo" command.

CCI|CCI-002038

Rule-ID|SV-274014r1120030_rule

STIG-ID|AZLX-23-001010

Vuln-ID|V-274014

AZLX-23-001015 - Amazon Linux 2023 must require users to reauthenticate for privilege escalation.

Rule-ID|SV-274015r1120033_rule

STIG-ID|AZLX-23-001015

Vuln-ID|V-274015

AZLX-23-001020 - Amazon Linux 2023 must require users to provide a password for privilege escalation.

CCI|CCI-000366

Rule-ID|SV-274016r1120036_rule

STIG-ID|AZLX-23-001020

Vuln-ID|V-274016

AZLX-23-001025 - Amazon Linux 2023 must have the audit package installed.

CCI|CCI-000130

CCI|CCI-000131

CCI|CCI-000132

CCI|CCI-000133

CCI|CCI-000134

CCI|CCI-000135

CCI|CCI-000154

CCI|CCI-000158

CCI|CCI-000159

CCI|CCI-000169

CCI|CCI-000172

CCI|CCI-001464

CCI|CCI-001487

CCI|CCI-001875

CCI|CCI-001876

CCI|CCI-001877

CCI|CCI-001878

CCI|CCI-001879

CCI|CCI-001880

CCI|CCI-001881

CCI|CCI-001882

CCI|CCI-001889

CCI|CCI-001914

CCI|CCI-002884

CCI|CCI-003938

Rule-ID|SV-274017r1120039_rule

STIG-ID|AZLX-23-001025

Vuln-ID|V-274017

AZLX-23-001030 - Amazon Linux 2023 must produce audit records containing information to establish what type of events occurred.

CCI|CCI-004188

Rule-ID|SV-274018r1120042_rule

STIG-ID|AZLX-23-001030

Vuln-ID|V-274018

AZLX-23-001035 - Amazon Linux 2023 audispd-plugins package must be installed.

CCI|CCI-001851

Rule-ID|SV-274019r1120045_rule

STIG-ID|AZLX-23-001035

Vuln-ID|V-274019

AZLX-23-001040 - Amazon Linux 2023 must have the rsyslog package installed.

Rule-ID|SV-274020r1155173_rule

STIG-ID|AZLX-23-001040

Vuln-ID|V-274020

AZLX-23-001045 - Amazon Linux 2023 must monitor remote access methods.

CCI|CCI-000067

Rule-ID|SV-274021r1120695_rule

STIG-ID|AZLX-23-001045

Vuln-ID|V-274021

AZLX-23-001050 - Amazon Linux 2023 must have the chrony package installed.

CCI|CCI-004923

Rule-ID|SV-274022r1120054_rule

STIG-ID|AZLX-23-001050

Vuln-ID|V-274022

AZLX-23-001055 - Amazon Linux 2023 chronyd service must be enabled.

Rule-ID|SV-274023r1120057_rule

STIG-ID|AZLX-23-001055

Vuln-ID|V-274023

AZLX-23-001060 - Amazon Linux 2023 must have the Advanced Intrusion Detection Environment (AIDE) package installed.

CCI|CCI-001744

CCI|CCI-002696

Rule-ID|SV-274024r1120060_rule

STIG-ID|AZLX-23-001060

Vuln-ID|V-274024

AZLX-23-001065 - Amazon Linux 2023 must routinely check the baseline configuration for unauthorized changes and notify the system administrator when anomalies in the operation of any security functions are discovered.

CCI|CCI-002699

CCI|CCI-002702

Rule-ID|SV-274025r1120723_rule

STIG-ID|AZLX-23-001065

Vuln-ID|V-274025

AZLX-23-001070 - Amazon Linux 2023 must use cryptographic mechanisms to protect the integrity of audit tools.

CCI|CCI-001493

CCI|CCI-001494

CCI|CCI-001495

CCI|CCI-001496

Rule-ID|SV-274026r1120066_rule

STIG-ID|AZLX-23-001070

Vuln-ID|V-274026

AZLX-23-001075 - Amazon Linux 2023 must have the firewalld package installed.

CCI|CCI-000015

CCI|CCI-000382

CCI|CCI-002314

CCI|CCI-002322

Rule-ID|SV-274027r1120069_rule

STIG-ID|AZLX-23-001075

Vuln-ID|V-274027

AZLX-23-001080 - Amazon Linux 2023 must have the firewalld servicew active.

Rule-ID|SV-274028r1120072_rule

STIG-ID|AZLX-23-001080

Vuln-ID|V-274028

AZLX-23-001085 - Amazon Linux 2023 must be configured to disable nonessential capabilities.

Rule-ID|SV-274029r1120075_rule

STIG-ID|AZLX-23-001085

Detections

Analytics

DISA Amazon Linux 2023 STIG v1r2

Warning! Audit Deprecated

Audit Details

Audit Changelog

Revision 1.1

Miscellaneous