Item Search

NameAudit NamePluginCategory
1.1.1.8 Ensure udf kernel module is not availableCIS Linux Mint 22 v1.0.0 L2 WorkstationUnix

CONFIGURATION MANAGEMENT

1.1.4.1 Ensure separate partition exists for /var/tmpCIS Amazon Linux 2023 v1.0.0 L2 ServerUnix

ACCESS CONTROL, CONFIGURATION MANAGEMENT, MEDIA PROTECTION

1.2.4 Ensure repo_gpgcheck is globally activatedCIS Amazon Linux 2023 v1.0.0 L2 ServerUnix

RISK ASSESSMENT, SYSTEM AND INFORMATION INTEGRITY

1.5.4 Ensure core file size is configuredCIS Linux Mint 22 v1.0.0 L1 WorkstationUnix

CONFIGURATION MANAGEMENT

1.5.6 Ensure Automatic Error Reporting is configuredCIS Linux Mint 22 v1.0.0 L1 WorkstationUnix

CONFIGURATION MANAGEMENT

1.6.2 Ensure /etc/issue is configuredCIS Linux Mint 22 v1.0.0 L1 WorkstationUnix

CONFIGURATION MANAGEMENT

1.6.3 Ensure /etc/issue.net is configuredCIS Linux Mint 22 v1.0.0 L1 WorkstationUnix

CONFIGURATION MANAGEMENT

1.6.5 Ensure access to /etc/issue is configuredCIS Linux Mint 22 v1.0.0 L1 WorkstationUnix

ACCESS CONTROL, MEDIA PROTECTION

1.7.2 Ensure desktop screen locks when the user is idleCIS Linux Mint 22 v1.0.0 L1 WorkstationUnix

ACCESS CONTROL

2.1 Host must run software that has not reached End of General Support statusCIS VMware ESXi 9.0 v1.0.0 L1 UnixUnix

SYSTEM AND SERVICES ACQUISITION

2.1.2 Ensure avahi daemon services are not in useCIS Linux Mint 22 v1.0.0 L2 WorkstationUnix

CONFIGURATION MANAGEMENT, SYSTEM AND INFORMATION INTEGRITY

2.1.5 Ensure dnsmasq services are not in useCIS Linux Mint 22 v1.0.0 L1 WorkstationUnix

CONFIGURATION MANAGEMENT

2.1.14 Ensure rsync services are not in useCIS Linux Mint 22 v1.0.0 L1 WorkstationUnix

CONFIGURATION MANAGEMENT

2.1.17 Ensure tftp server services are not in useCIS Linux Mint 22 v1.0.0 L1 WorkstationUnix

CONFIGURATION MANAGEMENT

2.1.18 Ensure web proxy server services are not in useCIS Linux Mint 22 v1.0.0 L1 WorkstationUnix

CONFIGURATION MANAGEMENT

2.1.19 Ensure web server services are not in useCIS Linux Mint 22 v1.0.0 L1 WorkstationUnix

CONFIGURATION MANAGEMENT

2.1.21 Ensure X window server services are not in useCIS Linux Mint 22 v1.0.0 L1 WorkstationUnix

CONFIGURATION MANAGEMENT

2.4.1.1 Ensure cron daemon is enabled and activeCIS Linux Mint 22 v1.0.0 L1 WorkstationUnix

CONFIGURATION MANAGEMENT, IDENTIFICATION AND AUTHENTICATION

2.4.1.5 Ensure access to /etc/cron.weekly is configuredCIS Linux Mint 22 v1.0.0 L1 WorkstationUnix

ACCESS CONTROL, MEDIA PROTECTION

3.2.2 Ensure tipc kernel module is not availableCIS Linux Mint 22 v1.0.0 L1 WorkstationUnix

CONFIGURATION MANAGEMENT

3.3.9 Ensure suspicious packets are loggedCIS Linux Mint 22 v1.0.0 L1 WorkstationUnix

AUDIT AND ACCOUNTABILITY

3.4.1.2 Ensure a single firewall configuration utility is in useCIS Amazon Linux 2023 v1.0.0 L2 ServerUnix

SECURITY ASSESSMENT AND AUTHORIZATION, SYSTEM AND COMMUNICATIONS PROTECTION

3.4.2.2 Ensure at least one nftables table existsCIS Amazon Linux 2023 v1.0.0 L2 ServerUnix

SECURITY ASSESSMENT AND AUTHORIZATION, SYSTEM AND COMMUNICATIONS PROTECTION

4.7 Host must configure a persistent log location for all locally stored audit recordsCIS VMware ESXi 9.0 v1.0.0 L1 UnixUnix

AUDIT AND ACCOUNTABILITY

5.2.1.2 Ensure latest version of libpam-modules is installedCIS Linux Mint 22 v1.0.0 L1 WorkstationUnix

IDENTIFICATION AND AUTHENTICATION

5.2.3.1.1 Ensure password failed attempts lockout is configuredCIS Linux Mint 22 v1.0.0 L1 WorkstationUnix

ACCESS CONTROL

5.2.3.2 Ensure actions as another user are always loggedCIS Amazon Linux 2023 v1.0.0 L2 ServerUnix

AUDIT AND ACCOUNTABILITY

5.2.3.7 Ensure unsuccessful file access attempts are collectedCIS Amazon Linux 2023 v1.0.0 L2 ServerUnix

AUDIT AND ACCOUNTABILITY

5.2.3.11 Ensure session initiation information is collectedCIS Amazon Linux 2023 v1.0.0 L2 ServerUnix

AUDIT AND ACCOUNTABILITY

5.2.3.19 Ensure kernel module loading unloading and modification is collectedCIS Amazon Linux 2023 v1.0.0 L2 ServerUnix

AUDIT AND ACCOUNTABILITY, CONFIGURATION MANAGEMENT

5.2.4.1 Ensure audit log files are mode 0640 or less permissiveCIS Amazon Linux 2023 v1.0.0 L2 ServerUnix

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY, MEDIA PROTECTION

5.2.4.3 Ensure only authorized groups are assigned ownership of audit log filesCIS Amazon Linux 2023 v1.0.0 L2 ServerUnix

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY, MEDIA PROTECTION

5.2.4.8 Ensure audit tools are 755 or more restrictiveCIS Amazon Linux 2023 v1.0.0 L2 ServerUnix

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY, MEDIA PROTECTION

5.3.2.2 Ensure root is the only GID 0 accountCIS Linux Mint 22 v1.0.0 L1 WorkstationUnix

ACCESS CONTROL, CONFIGURATION MANAGEMENT, IDENTIFICATION AND AUTHENTICATION, MEDIA PROTECTION

5.3.2.4 Ensure root account access is controlledCIS Linux Mint 22 v1.0.0 L1 WorkstationUnix

ACCESS CONTROL, MEDIA PROTECTION

5.11 Host must isolate management communicationsCIS VMware ESXi 9.0 v1.0.0 L1 UnixUnix

ACCESS CONTROL, SYSTEM AND INFORMATION INTEGRITY

6.1.2.1.2 Ensure systemd-journal-upload authentication is configuredCIS Linux Mint 22 v1.0.0 L2 WorkstationUnix

AUDIT AND ACCOUNTABILITY

6.1.2.1.4 Ensure systemd-journal-remote service is not in useCIS Linux Mint 22 v1.0.0 L2 WorkstationUnix

AUDIT AND ACCOUNTABILITY, CONFIGURATION MANAGEMENT

6.1.2.3 Ensure journald Compress is configuredCIS Linux Mint 22 v1.0.0 L1 WorkstationUnix

AUDIT AND ACCOUNTABILITY

6.2.1.1 Ensure auditd packages are installedCIS Linux Mint 22 v1.0.0 L2 WorkstationUnix

AUDIT AND ACCOUNTABILITY, SYSTEM AND INFORMATION INTEGRITY

6.2.2.4 Ensure system warns when audit logs are low on spaceCIS Linux Mint 22 v1.0.0 L2 WorkstationUnix

AUDIT AND ACCOUNTABILITY, SYSTEM AND INFORMATION INTEGRITY

6.2.3.3 Ensure events that modify the sudo log file are collectedCIS Linux Mint 22 v1.0.0 L2 WorkstationUnix

AUDIT AND ACCOUNTABILITY

6.2.3.7 Ensure unsuccessful file access attempts are collectedCIS Linux Mint 22 v1.0.0 L2 WorkstationUnix

AUDIT AND ACCOUNTABILITY

6.2.3.11 Ensure session initiation information is collectedCIS Linux Mint 22 v1.0.0 L2 WorkstationUnix

AUDIT AND ACCOUNTABILITY

6.2.4.8 Ensure audit tools mode is configuredCIS Linux Mint 22 v1.0.0 L2 WorkstationUnix

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY, MEDIA PROTECTION

6.5.11 Host SSH daemon, if enabled, must not permit tunnelsCIS VMware ESXi 9.0 v1.0.0 L1 UnixUnix

CONFIGURATION MANAGEMENT, MAINTENANCE

7.2.5 Ensure no duplicate UIDs existCIS Linux Mint 22 v1.0.0 L1 WorkstationUnix

CONFIGURATION MANAGEMENT, IDENTIFICATION AND AUTHENTICATION

7.2.6 Ensure no duplicate GIDs existCIS Linux Mint 22 v1.0.0 L1 WorkstationUnix

CONFIGURATION MANAGEMENT, IDENTIFICATION AND AUTHENTICATION

7.2.9 Ensure local interactive user home directories are configuredCIS Linux Mint 22 v1.0.0 L1 WorkstationUnix

ACCESS CONTROL, CONFIGURATION MANAGEMENT, MEDIA PROTECTION

7.2.10 Ensure local interactive user dot files access is configuredCIS Linux Mint 22 v1.0.0 L1 WorkstationUnix

ACCESS CONTROL, CONFIGURATION MANAGEMENT, IDENTIFICATION AND AUTHENTICATION, MEDIA PROTECTION