Item Search

NameAudit NamePluginCategory
O112-C1-011100 - Vendor-supported software must be evaluated and patched against newly found vulnerabilities.DISA STIG Oracle 11.2g v2r5 LinuxUnix

SYSTEM AND INFORMATION INTEGRITY

O112-C2-004400 - OS accounts utilized to run external procedures called by the DBMS must have limited privileges.DISA STIG Oracle 11.2g v2r5 LinuxUnix

CONFIGURATION MANAGEMENT

O112-C2-011900 - The DBMS must support the organizational requirements to specifically prohibit or restrict the use of unauthorized functions, ports, protocols, and/or services.DISA STIG Oracle 11.2g v2r5 LinuxUnix

CONFIGURATION MANAGEMENT

OL09-00-000910 - OL 9 must map the authenticated identity to the user or group account for PKI-based authentication.DISA Oracle Linux 9 STIG v1r6Unix

IDENTIFICATION AND AUTHENTICATION

OL09-00-001005 - OL 9 must enforce password complexity by requiring that at least one uppercase character be used.DISA Oracle Linux 9 STIG v1r6Unix

IDENTIFICATION AND AUTHENTICATION

OL09-00-001085 - OL 9 passwords for new users or password changes must have a 24-hour minimum password lifetime restriction in /etc/login.defs.DISA Oracle Linux 9 STIG v1r6Unix

IDENTIFICATION AND AUTHENTICATION

OL09-00-002012 - OL 9 must prevent code from being executed on file systems that are imported via Network File System (NFS).DISA Oracle Linux 9 STIG v1r6Unix

CONFIGURATION MANAGEMENT

OL09-00-002061 - OL 9 must mount /var/log with the nodev option.DISA Oracle Linux 9 STIG v1r6Unix

CONFIGURATION MANAGEMENT

OL09-00-002066 - OL 9 must mount /var/log/audit with the nosuid option.DISA Oracle Linux 9 STIG v1r6Unix

CONFIGURATION MANAGEMENT

OL09-00-002100 - OL 9 must disable the graphical user interface automount function unless required.DISA Oracle Linux 9 STIG v1r6Unix

IDENTIFICATION AND AUTHENTICATION

OL09-00-002124 - OL 9 must prevent a user from overriding the session idle-delay setting for the graphical user interface.DISA Oracle Linux 9 STIG v1r6Unix

ACCESS CONTROL

OL09-00-002150 - OL 9 must be configured to enable the display of the Standard Mandatory DOD Notice and Consent Banner before granting local or remote access to the system via a graphical user logon.DISA Oracle Linux 9 STIG v1r6Unix

ACCESS CONTROL

OL09-00-002302 - OL 9 must define default permissions for the c shell.DISA Oracle Linux 9 STIG v1r6Unix

CONFIGURATION MANAGEMENT

OL09-00-002330 - OL 9 must enable Linux audit logging for the USBGuard daemon.DISA Oracle Linux 9 STIG v1r6Unix

AUDIT AND ACCOUNTABILITY

OL09-00-002344 - OL 9 must enable the Pluggable Authentication Module (PAM) interface for SSHD.DISA Oracle Linux 9 STIG v1r6Unix

MAINTENANCE

OL09-00-002358 - OL 9 must not allow users to override SSH environment variables.DISA Oracle Linux 9 STIG v1r6Unix

CONFIGURATION MANAGEMENT

OL09-00-002361 - OL 9 must restrict the use of the su command.DISA Oracle Linux 9 STIG v1r6Unix

ACCESS CONTROL

OL09-00-002380 - OL 9 must disable the kernel.core_pattern.DISA Oracle Linux 9 STIG v1r6Unix

CONFIGURATION MANAGEMENT

OL09-00-002382 - OL 9 must disable storing core dumps.DISA Oracle Linux 9 STIG v1r6Unix

CONFIGURATION MANAGEMENT

OL09-00-002392 - OL 9 must disable the ability of systemd to spawn an interactive boot process.DISA Oracle Linux 9 STIG v1r6Unix

CONFIGURATION MANAGEMENT

OL09-00-002400 - OL 9 systemd-journald service must be enabled.DISA Oracle Linux 9 STIG v1r6Unix

SYSTEM AND COMMUNICATIONS PROTECTION

OL09-00-002401 - OL 9 must enable kernel parameters to enforce discretionary access control on hardlinks.DISA Oracle Linux 9 STIG v1r6Unix

ACCESS CONTROL

OL09-00-002408 - OL 9 must restrict exposed kernel pointer addresses access.DISA Oracle Linux 9 STIG v1r6Unix

SYSTEM AND COMMUNICATIONS PROTECTION, SYSTEM AND INFORMATION INTEGRITY

OL09-00-002413 - OL 9 must be configured so that the x86 Ctrl-Alt-Delete key sequence is disabled.DISA Oracle Linux 9 STIG v1r6Unix

ACCESS CONTROL

OL09-00-002421 - OL 9 must implement DOD-approved encryption in the bind package.DISA Oracle Linux 9 STIG v1r6Unix

SYSTEM AND COMMUNICATIONS PROTECTION

OL09-00-002423 - OL 9 must implement address space layout randomization (ASLR) to protect its memory from unauthorized code execution.DISA Oracle Linux 9 STIG v1r6Unix

SYSTEM AND INFORMATION INTEGRITY

OL09-00-002428 - OL 9 must prevent the loading of a new kernel for later execution.DISA Oracle Linux 9 STIG v1r6Unix

CONFIGURATION MANAGEMENT

OL09-00-002506 - OL 9 system commands must have mode 755 or less permissive.DISA Oracle Linux 9 STIG v1r6Unix

CONFIGURATION MANAGEMENT

OL09-00-002507 - OL 9 SSH server configuration file must be group-owned by root.DISA Oracle Linux 9 STIG v1r6Unix

CONFIGURATION MANAGEMENT

OL09-00-002510 - OL 9 must be configured so that a sticky bit must be set on all public directories.DISA Oracle Linux 9 STIG v1r6Unix

SYSTEM AND COMMUNICATIONS PROTECTION

OL09-00-002515 - OL 9 local interactive user home directories must have mode 0750 or less permissive.DISA Oracle Linux 9 STIG v1r6Unix

CONFIGURATION MANAGEMENT

OL09-00-002520 - OL 9 library directories must be group-owned by root or a system account.DISA Oracle Linux 9 STIG v1r6Unix

CONFIGURATION MANAGEMENT

OL09-00-002521 - OL 9 library directories must be owned by root.DISA Oracle Linux 9 STIG v1r6Unix

CONFIGURATION MANAGEMENT

OL09-00-002523 - OL 9 library files must be group owned by root or a system account.DISA Oracle Linux 9 STIG v1r6Unix

CONFIGURATION MANAGEMENT

OL09-00-002524 - OL 9 library files must be owned by root.DISA Oracle Linux 9 STIG v1r6Unix

CONFIGURATION MANAGEMENT

OL09-00-002533 - OL 9 /etc/group- file must be group-owned by root.DISA Oracle Linux 9 STIG v1r6Unix

CONFIGURATION MANAGEMENT

OL09-00-002539 - OL 9 /etc/gshadow- file must be group-owned by root.DISA Oracle Linux 9 STIG v1r6Unix

CONFIGURATION MANAGEMENT

OL09-00-002541 - OL 9 /etc/gshadow- file must be owned by root.DISA Oracle Linux 9 STIG v1r6Unix

CONFIGURATION MANAGEMENT

OL09-00-002542 - OL 9 /etc/gshadow file must have mode 0000 or less permissive to prevent unauthorized access.DISA Oracle Linux 9 STIG v1r6Unix

CONFIGURATION MANAGEMENT

OL09-00-002550 - OL 9 /etc/shadow file must be group-owned by root.DISA Oracle Linux 9 STIG v1r6Unix

CONFIGURATION MANAGEMENT

OL09-00-002561 - OL 9 /var/log directory must be owned by root.DISA Oracle Linux 9 STIG v1r6Unix

SYSTEM AND INFORMATION INTEGRITY

OL09-00-002570 - OL 9 audit tools must be group-owned by root.DISA Oracle Linux 9 STIG v1r6Unix

AUDIT AND ACCOUNTABILITY

OL09-00-002572 - OL 9 audit tools must have a mode of 0755 or less permissive.DISA Oracle Linux 9 STIG v1r6Unix

AUDIT AND ACCOUNTABILITY

OL09-00-003000 - OL 9 must be configured so that the root account is the only account having unrestricted access to the system.DISA Oracle Linux 9 STIG v1r6Unix

CONFIGURATION MANAGEMENT

OL09-00-003023 - OL 9 must ensure account lockouts persist.DISA Oracle Linux 9 STIG v1r6Unix

ACCESS CONTROL

OL09-00-006001 - OL 9 wireless network adapters must be disabled.DISA Oracle Linux 9 STIG v1r6Unix

ACCESS CONTROL, SYSTEM AND COMMUNICATIONS PROTECTION

OL09-00-006003 - OL 9 systems using Domain Name Servers (DNS) resolution must have at least two name servers configured.DISA Oracle Linux 9 STIG v1r6Unix

CONFIGURATION MANAGEMENT

OL09-00-006040 - OL 9 must not accept router advertisements on all IPv6 interfaces.DISA Oracle Linux 9 STIG v1r6Unix

CONFIGURATION MANAGEMENT

OL09-00-006044 - OL 9 must not accept router advertisements on all IPv6 interfaces by default.DISA Oracle Linux 9 STIG v1r6Unix

CONFIGURATION MANAGEMENT

OL09-00-006045 - OL 9 must prevent IPv6 Internet Control Message Protocol (ICMP) redirect messages from being accepted.DISA Oracle Linux 9 STIG v1r6Unix

CONFIGURATION MANAGEMENT