UBTU-24-600090 - Ubuntu 24.04 LTS handling data requiring "data at rest" protections must employ cryptographic mechanisms to prevent unauthorized disclosure and modification of the information at rest.

Information

Information at rest refers to the state of information when it is located on a secondary storage device (e.g., disk drive and tape drive, when used for backups) within an operating system.

This requirement addresses protection of user-generated data, as well as operating system-specific configuration data. Organizations may choose to employ different mechanisms to achieve confidentiality and integrity protections, as appropriate, in accordance with the security category and/or classification of the information.

Satisfies: SRG-OS-000185-GPOS-00079, SRG-OS-000404-GPOS-00183, SRG-OS-000405-GPOS-00184, SRG-OS-000780-GPOS-00240

NOTE: Nessus has provided the target output to assist in reviewing the benchmark to ensure target compliance.

Solution

To encrypt an entire partition, dedicate a partition for encryption in the partition layout.

Note: Encrypting a partition in an already-installed system is more difficult because it will need to be resized and existing partitions changed.

Item Details

Audit Name: DISA Canonical Ubuntu 24.04 LTS STIG v1r5

Category: SYSTEM AND COMMUNICATIONS PROTECTION

Plugin: Unix

Control ID: af3c4bb17e6d3e6ccf97a06f8df04fea15bfabf6834b171689f70898ceffc40a

Detections

Analytics

UBTU-24-600090 - Ubuntu 24.04 LTS handling data requiring "data at rest" protections must employ cryptographic mechanisms to prevent unauthorized disclosure and modification of the information at rest.

Information

Solution

See Also

Item Details