Item Search

NameAudit NamePluginCategory
1.1.1.1 Ensure cramfs kernel module is not availableCIS Oracle Linux 7 v4.0.0 L1 ServerUnix

CONFIGURATION MANAGEMENT

1.1.1.1 Ensure cramfs kernel module is not availableCIS Ubuntu Linux 24.04 LTS v2.0.0 L1 ServerUnix

CONFIGURATION MANAGEMENT

1.1.1.1 Ensure cramfs kernel module is not availableCIS Debian Linux 12 v2.0.0 L1 ServerUnix

CONFIGURATION MANAGEMENT

1.1.1.1 Ensure cramfs kernel module is not availableCIS Oracle Linux 8 v4.0.0 L1 ServerUnix

CONFIGURATION MANAGEMENT

1.1.1.1 Ensure cramfs kernel module is not availableCIS SUSE Linux Enterprise 15 v2.0.1 L1 ServerUnix

CONFIGURATION MANAGEMENT

1.1.1.1 Ensure cramfs kernel module is not availableCIS SUSE Linux Enterprise 16 v1.0.0 L1 WorkstationUnix

CONFIGURATION MANAGEMENT

1.1.1.1 Ensure cramfs kernel module is not availableCIS Oracle Linux 10 v1.0.0 L1 WorkstationUnix

CONFIGURATION MANAGEMENT

1.1.1.1 Ensure cramfs kernel module is not availableCIS AlmaLinux OS 10 v1.0.0 L1 WorkstationUnix

CONFIGURATION MANAGEMENT

1.1.1.1 Ensure cramfs kernel module is not availableCIS AlmaLinux OS 9 v3.0.0 L1 ServerUnix

CONFIGURATION MANAGEMENT

1.1.1.1 Ensure mounting of cramfs filesystems is disabledCIS CentOS Linux 8 Workstation L1 v2.0.0Unix

CONFIGURATION MANAGEMENT

1.1.1.1 Ensure mounting of cramfs filesystems is disabledCIS Debian Linux 10 v2.0.0 L1 ServerUnix

CONFIGURATION MANAGEMENT

1.1.1.1 Ensure mounting of cramfs filesystems is disabledCIS Debian Linux 10 v2.0.0 L1 WorkstationUnix

CONFIGURATION MANAGEMENT

1.1.1.1 Ensure mounting of cramfs filesystems is disabled - lsmodCIS Red Hat Enterprise Linux 7 STIG v2.0.0 L1 WorkstationUnix

CONFIGURATION MANAGEMENT, SYSTEM AND SERVICES ACQUISITION

1.1.1.1 Ensure mounting of cramfs filesystems is disabled - lsmodCIS Ubuntu Linux 18.04 LXD Host L1 Server v1.0.0Unix

CONFIGURATION MANAGEMENT

1.1.1.1 Ensure mounting of cramfs filesystems is disabled - modprobeCIS Debian Family Workstation L1 v1.0.0Unix

CONFIGURATION MANAGEMENT

1.1.1.1 Ensure mounting of cramfs filesystems is disabled - modprobeCIS Fedora 19 Family Linux Workstation L1 v1.0.0Unix

CONFIGURATION MANAGEMENT

1.1.1.1 Ensure mounting of cramfs filesystems is disabled - modprobeCIS Oracle Linux 6 Server L1 v2.0.0Unix

CONFIGURATION MANAGEMENT

1.1.1.1 Ensure mounting of cramfs filesystems is disabled - modprobeCIS Red Hat Enterprise Linux 7 STIG v2.0.0 L1 WorkstationUnix

CONFIGURATION MANAGEMENT, SYSTEM AND SERVICES ACQUISITION

1.1.1.1 Ensure mounting of cramfs filesystems is disabled - modprobeCIS SUSE Linux Enterprise Server 11 L1 v2.1.1Unix

CONFIGURATION MANAGEMENT

1.1.1.1 Ensure mounting of cramfs filesystems is disabled - modprobeCIS Ubuntu Linux 16.04 LTS Server L1 v2.0.0Unix

CONFIGURATION MANAGEMENT

1.1.1.1 Ensure mounting of cramfs filesystems is disabled - modprobeCIS Ubuntu Linux 18.04 LXD Host L1 LXD v1.0.0Unix

CONFIGURATION MANAGEMENT

1.1.1.1 Ensure mounting of cramfs filesystems is disabled - modprobeCIS Ubuntu Linux 18.04 LXD Host L1 Workstation v1.0.0Unix

CONFIGURATION MANAGEMENT

1.1.1.1 Ensure mounting of cramfs filesystems is disabled (lsmod)CIS Ubuntu Linux 14.04 LTS Workstation L1 v2.1.0Unix

CONFIGURATION MANAGEMENT

1.1.1.1 Ensure mounting of squashfs filesystems is disabledCIS Amazon Linux 2023 v1.0.0 L2 ServerUnix

CONFIGURATION MANAGEMENT

1.1.1.6 Ensure mounting of squashfs filesystems is disabledCIS Debian Linux 10 v2.0.0 L2 WorkstationUnix

CONFIGURATION MANAGEMENT

1.1.1.6 Ensure squashfs kernel module is not availableCIS Debian Linux 11 v2.0.0 L2 WorkstationUnix

CONFIGURATION MANAGEMENT

1.1.1.7 Ensure squashfs kernel module is not availableCIS Oracle Linux 9 v3.0.0 L2 ServerUnix

CONFIGURATION MANAGEMENT

1.1.1.7 Ensure squashfs kernel module is not availableCIS Rocky Linux 9 v3.0.0 L2 ServerUnix

CONFIGURATION MANAGEMENT

1.3 Ensure only defined users have access to the file systemCIS IBM WebSphere Liberty v1.0.0 L1Unix

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY

1.152 AZLX-23-002410CIS Amazon Linux 2023 STIG v1.0.0 CAT IIUnix

CONFIGURATION MANAGEMENT

2.1.20 Ensure X window server services are not in useCIS Ubuntu Linux 20.04 LTS v3.0.0 L2 ServerUnix

CONFIGURATION MANAGEMENT

2.1.20 Ensure X window server services are not in useCIS Rocky Linux 10 v1.0.0 L2 ServerUnix

CONFIGURATION MANAGEMENT

2.1.20 Ensure X window server services are not in useCIS Debian Linux 11 v2.0.0 L2 ServerUnix

CONFIGURATION MANAGEMENT

2.1.21 Ensure X window server services are not in useCIS Ubuntu Linux 26.04 LTS v1.0.0 L2 ServerUnix

CONFIGURATION MANAGEMENT

2.1.22 Ensure X window server services are not in useCIS Rocky Linux 8 v3.0.0 L2 ServerUnix

CONFIGURATION MANAGEMENT

2.1.22 Ensure X window server services are not in useCIS Oracle Linux 8 v4.0.0 L2 ServerUnix

CONFIGURATION MANAGEMENT

2.3 Disable PostgreSQL Command HistoryCIS PostgreSQL 15 v1.2.0 L1 OS Linux UnixUnix

MEDIA PROTECTION

4.1.4 Secure Permissions for the Primary Archive Log Location (LOGARCHMETH1)CIS IBM DB2 12.1 v1.0.0 Linux OS Level 1Unix

ACCESS CONTROL, MEDIA PROTECTION

4.1.5 Secure Permissions for the Secondary Archive Log Location (LOGARCHMETH2)CIS IBM DB2 12.1 v1.0.0 Windows OS Level 1Windows

ACCESS CONTROL, MEDIA PROTECTION

8.1.2 Ensure Audit bin(ary) audit event collection is configuredCIS IBM AIX 7 v1.2.0 L2Unix

AUDIT AND ACCOUNTABILITY

8.4.29 Disable all but VGA mode on virtual machines.CIS VMware ESXi 5.5 v1.2.0 Level 2VMware

SYSTEM AND COMMUNICATIONS PROTECTION

AZLX-23-001020 - Amazon Linux 2023 must require users to provide a password for privilege escalation.DISA Amazon Linux 2023 STIG v1r4Unix

CONFIGURATION MANAGEMENT

AZLX-23-002535 - Amazon Linux 2023 must enable discretionary access control on hardlinks.DISA Amazon Linux 2023 STIG v1r4Unix

ACCESS CONTROL

AZLX-23-002540 - Amazon Linux 2023 must enable kernel parameters to enforce discretionary access control on symlinks.DISA Amazon Linux 2023 STIG v1r4Unix

ACCESS CONTROL

DKER-EE-001240 - The Docker Enterprise hosts process namespace must not be shared.DISA STIG Docker Enterprise 2.x Linux/Unix v2r2Unix

ACCESS CONTROL

DKER-EE-001250 - The Docker Enterprise hosts IPC namespace must not be shared.DISA STIG Docker Enterprise 2.x Linux/Unix v2r2Unix

ACCESS CONTROL

DTAVSEL-005 - The McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x On-Access scanner must be configured to find unknown program viruses.McAfee Virus Scan Enterprise for Linux 1.9x/2.0x Managed Client v1r5Unix

SYSTEM AND INFORMATION INTEGRITY

DTAVSEL-006 - The McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x On-Access scanner must be configured to find unknown macro viruses.McAfee Virus Scan Enterprise for Linux 1.9x/2.0x Managed Client v1r5Unix

SYSTEM AND INFORMATION INTEGRITY

DTAVSEL-008 - The McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x On-Access scanner must be configured to scan files when being written to disk.McAfee Virus Scan Enterprise for Linux 1.9x/2.0x Managed Client v1r5Unix

SYSTEM AND INFORMATION INTEGRITY

DTAVSEL-018 - The McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x On-Access scanner must be configured to allow access to files if scanning times out.McAfee Virus Scan Enterprise for Linux 1.9x/2.0x Managed Client v1r5Unix

SYSTEM AND INFORMATION INTEGRITY