DISA_Canonical_Ubuntu_22.04_LTS_STIG_v2r5.audit from DISA Canonical Ubuntu 22.04 LTS STIG v2r5

UBTU-22-211015 - Ubuntu 22.04 LTS must disable the x86 Ctrl-Alt-Delete key sequence.

CAT|I

CCI|CCI-000366

Rule-ID|SV-260469r991589_rule

STIG-ID|UBTU-22-211015

Vuln-ID|V-260469

UBTU-22-212010 - Ubuntu 22.04 LTS, when booted, must require authentication upon booting into single-user and maintenance modes.

CCI|CCI-000213

Rule-ID|SV-260470r958472_rule

STIG-ID|UBTU-22-212010

Vuln-ID|V-260470

UBTU-22-212015 - Ubuntu 22.04 LTS must initiate session audits at system startup.

CAT|II

CCI|CCI-001464

Rule-ID|SV-260471r1069117_rule

STIG-ID|UBTU-22-212015

Vuln-ID|V-260471

UBTU-22-213010 - Ubuntu 22.04 LTS must restrict access to the kernel message buffer.

CAT|III

CCI|CCI-001090

Rule-ID|SV-260472r958524_rule

STIG-ID|UBTU-22-213010

Vuln-ID|V-260472

UBTU-22-213015 - Ubuntu 22.04 LTS must disable kernel core dumps so that it can fail to a secure state if system initialization fails, shutdown fails or aborts fail.

CCI|CCI-001190

Rule-ID|SV-260473r1044782_rule

STIG-ID|UBTU-22-213015

Vuln-ID|V-260473

UBTU-22-213020 - Ubuntu 22.04 LTS must implement address space layout randomization to protect its memory from unauthorized code execution.

CCI|CCI-002824

Rule-ID|SV-260474r958928_rule

STIG-ID|UBTU-22-213020

Vuln-ID|V-260474

UBTU-22-213025 - Ubuntu 22.04 LTS must implement nonexecutable data to protect its memory from unauthorized code execution.

Rule-ID|SV-260475r958928_rule

STIG-ID|UBTU-22-213025

Vuln-ID|V-260475

UBTU-22-214010 - Ubuntu 22.04 LTS must be configured so that the Advance Package Tool (APT) prevents the installation of patches, service packs, device drivers, or operating system components without verification they have been digitally signed using a certificate that is recognized and approved by the organization.

CCI|CCI-001749

CCI|CCI-003992

Rule-ID|SV-260476r1015003_rule

STIG-ID|UBTU-22-214010

Vuln-ID|V-260476

UBTU-22-214015 - Ubuntu 22.04 LTS must be configured so that the Advance Package Tool (APT) removes all software components after updated versions have been installed.

CCI|CCI-002617

Rule-ID|SV-260477r1044773_rule

STIG-ID|UBTU-22-214015

Vuln-ID|V-260477

UBTU-22-215010 - Ubuntu 22.04 LTS must have the "libpam-pwquality" package installed.

Rule-ID|SV-260478r991587_rule

STIG-ID|UBTU-22-215010

Vuln-ID|V-260478

UBTU-22-215015 - Ubuntu 22.04 LTS must have the "chrony" package installed.

Rule-ID|SV-260479r991589_rule

STIG-ID|UBTU-22-215015

Vuln-ID|V-260479

UBTU-22-215020 - Ubuntu 22.04 LTS must not have the "systemd-timesyncd" package installed.

Rule-ID|SV-260480r991589_rule

STIG-ID|UBTU-22-215020

Vuln-ID|V-260480

UBTU-22-215025 - Ubuntu 22.04 LTS must not have the "ntp" package installed.

Rule-ID|SV-260481r991589_rule

STIG-ID|UBTU-22-215025

Vuln-ID|V-260481

UBTU-22-215030 - Ubuntu 22.04 LTS must not have the "rsh-server" package installed.

CCI|CCI-000381

Rule-ID|SV-260482r958478_rule

STIG-ID|UBTU-22-215030

Vuln-ID|V-260482

UBTU-22-215035 - Ubuntu 22.04 LTS must not have the "telnet" package installed.

CCI|CCI-000197

Rule-ID|SV-260483r987796_rule

STIG-ID|UBTU-22-215035

Vuln-ID|V-260483

UBTU-22-231010 - Ubuntu 22.04 LTS must implement cryptographic mechanisms to prevent unauthorized disclosure and modification of all information that requires protection at rest.

CCI|CCI-001199

CCI|CCI-002475

CCI|CCI-002476

Rule-ID|SV-260484r958552_rule

STIG-ID|UBTU-22-231010

Vuln-ID|V-260484

UBTU-22-232010 - Ubuntu 22.04 LTS must have directories that contain system commands set to a mode of "755" or less permissive.

CCI|CCI-001495

Rule-ID|SV-260485r991559_rule

STIG-ID|UBTU-22-232010

Vuln-ID|V-260485

UBTU-22-232015 - Ubuntu 22.04 LTS must have system commands set to a mode of "755" or less permissive.

CCI|CCI-001499

Rule-ID|SV-260486r991560_rule

STIG-ID|UBTU-22-232015

Vuln-ID|V-260486

UBTU-22-232020 - Ubuntu 22.04 LTS library files must have mode "755" or less permissive.

Rule-ID|SV-260487r1107262_rule

STIG-ID|UBTU-22-232020

Vuln-ID|V-260487

UBTU-22-232025 - Ubuntu 22.04 LTS must configure the "/var/log" directory to have mode "755" or less permissive.

CCI|CCI-001314

Rule-ID|SV-260488r958566_rule

STIG-ID|UBTU-22-232025

Vuln-ID|V-260488

UBTU-22-232026 - Ubuntu 22.04 LTS must generate error messages that provide information necessary for corrective actions without revealing information that could be exploited by adversaries.

CCI|CCI-001312

Rule-ID|SV-260489r958564_rule

STIG-ID|UBTU-22-232026

Vuln-ID|V-260489

UBTU-22-232027 - Ubuntu 22.04 LTS must generate system journal entries without revealing information that could be exploited by adversaries.

Rule-ID|SV-260490r1069105_rule

STIG-ID|UBTU-22-232027

Vuln-ID|V-260490

UBTU-22-232030 - Ubuntu 22.04 LTS must configure "/var/log/syslog" file with mode "640" or less permissive.

Rule-ID|SV-260491r958566_rule

STIG-ID|UBTU-22-232030

Vuln-ID|V-260491

UBTU-22-232035 - Ubuntu 22.04 LTS must configure audit tools with a mode of "755" or less permissive.

CCI|CCI-001493

CCI|CCI-001494

Rule-ID|SV-260492r991557_rule

STIG-ID|UBTU-22-232035

Vuln-ID|V-260492

UBTU-22-232040 - Ubuntu 22.04 LTS must have directories that contain system commands owned by "root".

Rule-ID|SV-260493r991559_rule

STIG-ID|UBTU-22-232040

Vuln-ID|V-260493

UBTU-22-232045 - Ubuntu 22.04 LTS must have directories that contain system commands group-owned by "root".

Rule-ID|SV-260494r991559_rule

STIG-ID|UBTU-22-232045

Vuln-ID|V-260494

UBTU-22-232050 - Ubuntu 22.04 LTS must have system commands owned by "root" or a system account.

Rule-ID|SV-260495r991560_rule

STIG-ID|UBTU-22-232050

Vuln-ID|V-260495

UBTU-22-232055 - Ubuntu 22.04 LTS must have system commands group-owned by "root" or a system account.

Rule-ID|SV-260496r991560_rule

STIG-ID|UBTU-22-232055

Vuln-ID|V-260496

UBTU-22-232060 - Ubuntu 22.04 LTS library directories must be owned by "root".

Rule-ID|SV-260497r991560_rule

STIG-ID|UBTU-22-232060

Vuln-ID|V-260497

UBTU-22-232065 - Ubuntu 22.04 LTS library directories must be group-owned by "root".

Rule-ID|SV-260498r991560_rule

STIG-ID|UBTU-22-232065

Vuln-ID|V-260498

UBTU-22-232070 - Ubuntu 22.04 LTS library files must be owned by "root".

Rule-ID|SV-260499r1107264_rule

STIG-ID|UBTU-22-232070

Vuln-ID|V-260499

UBTU-22-232075 - Ubuntu 22.04 LTS library files must be group-owned by "root".

Rule-ID|SV-260500r1107266_rule

STIG-ID|UBTU-22-232075

Vuln-ID|V-260500

UBTU-22-232080 - Ubuntu 22.04 LTS must configure the directories used by the system journal to be owned by "root".

Rule-ID|SV-260501r958566_rule

STIG-ID|UBTU-22-232080

Vuln-ID|V-260501

UBTU-22-232085 - Ubuntu 22.04 LTS must configure the directories used by the system journal to be group-owned by "systemd-journal".

Rule-ID|SV-260502r958566_rule

STIG-ID|UBTU-22-232085

Vuln-ID|V-260502

UBTU-22-232090 - Ubuntu 22.04 LTS must configure the files used by the system journal to be owned by "root".

Rule-ID|SV-260503r958566_rule

STIG-ID|UBTU-22-232090

Vuln-ID|V-260503

UBTU-22-232095 - Ubuntu 22.04 LTS must configure the files used by the system journal to be group-owned by "systemd-journal".

Rule-ID|SV-260504r958566_rule

STIG-ID|UBTU-22-232095

Vuln-ID|V-260504

UBTU-22-232100 - Ubuntu 22.04 LTS must be configured so that the "journalctl" command is owned by "root".

Rule-ID|SV-260505r958566_rule

STIG-ID|UBTU-22-232100

Vuln-ID|V-260505

UBTU-22-232105 - Ubuntu 22.04 LTS must be configured so that the "journalctl" command is group-owned by "root".

Rule-ID|SV-260506r958566_rule

STIG-ID|UBTU-22-232105

Vuln-ID|V-260506

UBTU-22-232110 - Ubuntu 22.04 LTS must configure audit tools to be owned by "root".

Rule-ID|SV-260507r1101725_rule

STIG-ID|UBTU-22-232110

Vuln-ID|V-260507

UBTU-22-232120 - Ubuntu 22.04 LTS must configure the "/var/log" directory to be owned by "root".

Rule-ID|SV-260508r958566_rule

STIG-ID|UBTU-22-232120

Vuln-ID|V-260508

UBTU-22-232125 - Ubuntu 22.04 LTS must configure the "/var/log" directory to be group-owned by "syslog".

Rule-ID|SV-260509r958566_rule

STIG-ID|UBTU-22-232125

Vuln-ID|V-260509

UBTU-22-232130 - Ubuntu 22.04 LTS must configure "/var/log/syslog" file to be owned by "syslog".

Rule-ID|SV-260510r958566_rule

STIG-ID|UBTU-22-232130

Vuln-ID|V-260510

UBTU-22-232135 - Ubuntu 22.04 LTS must configure the "/var/log/syslog" file to be group-owned by "adm".

Rule-ID|SV-260511r958566_rule

STIG-ID|UBTU-22-232135

Vuln-ID|V-260511

UBTU-22-232140 - Ubuntu 22.04 LTS must be configured so that the "journalctl" command is not accessible by unauthorized users.

Rule-ID|SV-260512r958564_rule

STIG-ID|UBTU-22-232140

Vuln-ID|V-260512

UBTU-22-232145 - Ubuntu 22.04 LTS must set a sticky bit on all public directories to prevent unauthorized and unintended information transferred via shared system resources.

Detections

Analytics

DISA Canonical Ubuntu 22.04 LTS STIG v2r5

Warning! Audit Deprecated

Audit Details

Audit Changelog

Revision 1.2

Miscellaneous

Revision 1.1

Functional Update

Miscellaneous


Revision 1.2 Dec 22, 2025 Miscellaneous Audit deprecated. Metadata updated. References updated.
Revision 1.1 Oct 30, 2025 Functional Update UBTU-22-254020 - Ubuntu 22.04 LTS must ensure SSSD performs certificate path validation, including revocation checking, against a trusted anchor for PKI-based authentication. UBTU-22-654041 - Ubuntu 22.04 LTS must audit any script or executable called by cron as root or by any privileged user. Miscellaneous Metadata updated.