Item Search

NameAudit NamePluginCategory
1.1.1 Ensure mounting of squashfs filesystems is disabled - lsmodCIS Aliyun Linux 2 L1 v1.0.0Unix

CONFIGURATION MANAGEMENT

1.1.3 Ensure nodev option set on /tmp partitionCIS Aliyun Linux 2 L1 v1.0.0Unix

CONFIGURATION MANAGEMENT

1.1.18 Ensure sticky bit is set on all world-writable directoriesCIS Aliyun Linux 2 L1 v1.0.0Unix

CONFIGURATION MANAGEMENT

1.1.19 Disable AutomountingCIS Aliyun Linux 2 L1 v1.0.0Unix

CONFIGURATION MANAGEMENT

1.2.3 Ensure gpgcheck is globally activatedCIS Aliyun Linux 2 L1 v1.0.0Unix

SYSTEM AND INFORMATION INTEGRITY

1.5.3 Ensure prelink is disabledCIS Aliyun Linux 2 L1 v1.0.0Unix

AUDIT AND ACCOUNTABILITY

1.7.1.1 Ensure message of the day is configured properly - msrvCIS Aliyun Linux 2 L1 v1.0.0Unix

CONFIGURATION MANAGEMENT

2.1 EFS - implementationCIS IBM AIX 7.1 L2 v2.1.0Unix

IDENTIFICATION AND AUTHENTICATION, SYSTEM AND COMMUNICATIONS PROTECTION

2.1.1.2 Ensure ntp is configured - NTP server/poolCIS Aliyun Linux 2 L1 v1.0.0Unix

AUDIT AND ACCOUNTABILITY

2.1.1.2 Ensure ntp is configured - restrict -4CIS Aliyun Linux 2 L1 v1.0.0Unix

AUDIT AND ACCOUNTABILITY

2.1.1.3 Ensure chrony is configured - OPTIONSCIS Aliyun Linux 2 L1 v1.0.0Unix

AUDIT AND ACCOUNTABILITY

2.1.13 Ensure HTTP Proxy Server is not enabled - statusCIS Aliyun Linux 2 L1 v1.0.0Unix

CONFIGURATION MANAGEMENT

2.1.16 Ensure NIS Server is not enabled - statusCIS Aliyun Linux 2 L1 v1.0.0Unix

CONFIGURATION MANAGEMENT

2.1.17 Ensure rsh server is not enabled - rexec.socketCIS Aliyun Linux 2 L1 v1.0.0Unix

CONFIGURATION MANAGEMENT

2.1.17 Ensure rsh server is not enabled - rexec.socket statusCIS Aliyun Linux 2 L1 v1.0.0Unix

CONFIGURATION MANAGEMENT

2.1.17 Ensure rsh server is not enabled - rlogin.socketCIS Aliyun Linux 2 L1 v1.0.0Unix

CONFIGURATION MANAGEMENT

3.1.1.5 rcnfsCIS IBM AIX 7.1 L2 v2.1.0Unix

CONFIGURATION MANAGEMENT

3.1.2.5 dhcpsdCIS IBM AIX 7.1 L2 v2.1.0Unix

CONFIGURATION MANAGEMENT

3.1.2.7 gatedCIS IBM AIX 7.1 L2 v2.1.0Unix

CONFIGURATION MANAGEMENT

3.1.2.8 hostmibdCIS IBM AIX 7.1 L2 v2.1.0Unix

CONFIGURATION MANAGEMENT

3.1.2.16 snmpdCIS IBM AIX 7.1 L2 v2.1.0Unix

CONFIGURATION MANAGEMENT

3.2.4 /etc/inetd.conf - dtspc - dtspcCIS IBM AIX 7.1 L2 v2.1.0Unix

CONFIGURATION MANAGEMENT

3.4.6 Unattended terminal session timeout is 900 seconds (or less) - TIMEOUTCIS IBM AIX 7.1 L1 v2.1.0Unix

ACCESS CONTROL

3.4.6 Unattended terminal session timeout is 900 seconds (or less) - TMOUTCIS IBM AIX 7.1 L1 v2.1.0Unix

ACCESS CONTROL

3.4.6 Unattended terminal session timeout is 900 seconds (or less) - TMOUTCIS IBM AIX 7.1 L2 v2.1.0Unix

ACCESS CONTROL

3.5.1.2 NIS - de-install NIS server - de-install NIS serverCIS IBM AIX 7.1 L2 v2.1.0Unix

CONFIGURATION MANAGEMENT

3.5.2.1 SNMP - disable private community string - disable private community stringCIS IBM AIX 7.1 L2 v2.1.0Unix

CONFIGURATION MANAGEMENT

3.5.3 Remote command lockdown - rloginCIS IBM AIX 7.1 L2 v2.1.0Unix

ACCESS CONTROL, MEDIA PROTECTION

3.5.4 Removal of entries from /etc/hosts.equivCIS IBM AIX 7.1 L2 v2.1.0Unix

CONFIGURATION MANAGEMENT

3.5.5 Removal of .rhosts and .netrc files - .netrcCIS IBM AIX 7.1 L2 v2.1.0Unix

CONFIGURATION MANAGEMENT

3.5.6 Remote daemon lockdown - rlogindCIS IBM AIX 7.1 L2 v2.1.0Unix

CONFIGURATION MANAGEMENT

3.5.6 Remote daemon lockdown - rshdCIS IBM AIX 7.1 L2 v2.1.0Unix

CONFIGURATION MANAGEMENT

3.6.1.1 OpenSSH - InstallationCIS IBM AIX 7.1 L1 v2.1.0Unix

CONFIGURATION MANAGEMENT, MAINTENANCE

3.6.1.8 Configuring SSH - removal of /etc/shosts.equivCIS IBM AIX 7.1 L1 v2.1.0Unix

CONFIGURATION MANAGEMENT

3.6.1.12 OpenSSH: Ensure only strong ciphers are usedCIS IBM AIX 7.1 L1 v2.1.0Unix

ACCESS CONTROL, IDENTIFICATION AND AUTHENTICATION, SYSTEM AND COMMUNICATIONS PROTECTION

3.6.1.14 OpenSSH: Regulate access to serverCIS IBM AIX 7.1 L1 v2.1.0Unix

CONFIGURATION MANAGEMENT

3.6.2.3 /var/spool/mqueue - permissions and ownershipCIS IBM AIX 7.1 L1 v2.1.0Unix

ACCESS CONTROL, MEDIA PROTECTION

3.7.1.3 /auditCIS IBM AIX 7.1 L1 v2.1.0Unix

ACCESS CONTROL, MEDIA PROTECTION

3.7.1.4 /etc/securityCIS IBM AIX 7.1 L1 v2.1.0Unix

ACCESS CONTROL, MEDIA PROTECTION

3.7.2.3 /smit.logCIS IBM AIX 7.1 L1 v2.1.0Unix

ACCESS CONTROL, MEDIA PROTECTION

3.7.2.11 /var/adm/cron/cron.allowCIS IBM AIX 7.1 L1 v2.1.0Unix

ACCESS CONTROL, MEDIA PROTECTION

3.8.1 TE - implementation - CHKSCRIPTCIS IBM AIX 7.1 L2 v2.1.0Unix

SYSTEM AND INFORMATION INTEGRITY

3.8.1 TE - implementation - TECIS IBM AIX 7.1 L2 v2.1.0Unix

SYSTEM AND INFORMATION INTEGRITY

4.2.12 minotherCIS IBM AIX 7.1 L1 v2.1.0Unix

IDENTIFICATION AND AUTHENTICATION

4.3.6 nobodyCIS IBM AIX 7.1 L1 v2.1.0Unix

IDENTIFICATION AND AUTHENTICATION

5.2.2 Ensure sudo log file is activeCIS IBM AIX 7.1 L2 v2.1.0Unix

AUDIT AND ACCOUNTABILITY

5.7 Services - crontab access is root only - adm exists in cron.allowCIS IBM AIX 7.1 L2 v2.1.0Unix

SYSTEM AND INFORMATION INTEGRITY

5.7 Services - crontab access is root only - cron.deny does not existCIS IBM AIX 7.1 L2 v2.1.0Unix

SYSTEM AND INFORMATION INTEGRITY

6.1.1 Configuring syslog - local logging - *.info/auth.none in /etc/syslog.confCIS IBM AIX 7.1 L1 v2.1.0Unix

AUDIT AND ACCOUNTABILITY

6.2 AIX Auditing - auditclasses updateCIS IBM AIX 7.1 L2 v2.1.0Unix

AUDIT AND ACCOUNTABILITY