UBTU-20-010444 - Ubuntu operating system must implement cryptographic mechanisms to prevent unauthorized modification of all information at rest.

Warning! Audit Deprecated

This audit has been deprecated and will be removed in a future update.

View Next Audit Version

Information

Operating systems handling data requiring 'data at rest' protections must employ cryptographic mechanisms to prevent unauthorized disclosure and modification of the information at rest.

Selection of a cryptographic mechanism is based on the need to protect the integrity of organizational information. The strength of the mechanism is commensurate with the security category and/or classification of the information. Organizations have the flexibility to either encrypt all information on storage devices (i.e., full disk encryption) or encrypt specific data structures (e.g., files, records, or fields).

NOTE: Nessus has provided the target output to assist in reviewing the benchmark to ensure target compliance.

Solution

To encrypt an entire partition, dedicate a partition for encryption in the partition layout.

Note: Encrypting a partition in an already-installed system is more difficult because it will need to be resized and existing partitions changed.

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_CAN_Ubuntu_20-04_LTS_V1R5_STIG.zip

Item Details

References: CAT|II, CCI|CCI-002475, Rule-ID|SV-238365r654270_rule, STIG-ID|UBTU-20-010444, Vuln-ID|V-238365

Plugin: Unix

Control ID: ec54fb826be838f76e485ab3c2ce8d6f2e709742be4e0e1001fa2bbeb49df660