Revision 1.5

Sep 19, 2023
Functional Update
  • SLES-12-010400 - There must be no .shosts files on the SUSE operating system.
  • SLES-12-010410 - There must be no shosts.equiv files on the SUSE operating system.
  • SLES-12-010460 - The sticky bit must be set on all SUSE operating system world-writable directories.
  • SLES-12-010690 - All SUSE operating system files and directories must have a valid owner.
  • SLES-12-010700 - All SUSE operating system files and directories must have a valid group owner.
  • SLES-12-010780 - All SUSE operating system local initialization files must not execute world-writable programs.
  • SLES-12-010830 - All SUSE operating system world-writable directories must be group-owned by root, sys, bin, or an application group.
  • SLES-12-010871 - The SUSE operating system library files must have mode 0755 or less permissive.
  • SLES-12-010872 - The SUSE operating system library directories must have mode 0755 or less permissive.
  • SLES-12-010873 - The SUSE operating system library files must be owned by root.
  • SLES-12-010874 - The SUSE operating system library directories must be owned by root.
  • SLES-12-010875 - The SUSE operating system library files must be group-owned by root.
  • SLES-12-010876 - The SUSE operating system library directories must be group-owned by root.
  • SLES-12-010877 - The SUSE operating system must have system commands set to a mode of 0755 or less permissive.
  • SLES-12-010878 - The SUSE operating system must have directories that contain system commands set to a mode of 0755 or less permissive.
  • SLES-12-010879 - The SUSE operating system must have system commands owned by root.
  • SLES-12-010881 - The SUSE operating system must have directories that contain system commands owned by root.
  • SLES-12-010882 - The SUSE operating system must have system commands group-owned by root or a system account.
  • SLES-12-010883 - The SUSE operating system must have directories that contain system commands group-owned by root.
  • SLES-12-010910 - The SUSE operating system must be configured to not overwrite Pluggable Authentication Modules (PAM) configuration on package changes.
Miscellaneous
  • Variables updated.