Item Search

NameAudit NamePluginCategory
1.1 Place Databases on Non-System PartitionsCIS MySQL 8.0 Enterprise Linux OS L1 v1.4.0Unix

SYSTEM AND COMMUNICATIONS PROTECTION

1.1.3 Ensure nodev option set on /tmp partitionCIS Distribution Independent Linux Workstation L1 v2.0.0Unix

CONFIGURATION MANAGEMENT

1.2 Use Dedicated Least Privileged Account for MariaDB Daemon/ServiceCIS MariaDB 10.6 on Linux L1 v1.1.0Unix

ACCESS CONTROL, MEDIA PROTECTION

2.1.1 Backup Policy in PlaceCIS MySQL 5.6 Community Linux OS L1 v2.0.0Unix

CONTINGENCY PLANNING

2.1.1 Backup Policy in PlaceCIS MySQL 5.6 Enterprise Database L1 v2.0.0MySQLDB

CONTINGENCY PLANNING

2.1.1 Backup Policy in PlaceCIS MySQL 5.7 Community Linux OS L1 v2.0.0Unix

CONTINGENCY PLANNING

2.1.1 Backup Policy in PlaceCIS Oracle MySQL Enterprise Edition 8.4 v1.0.0 L1 MySQL OS LinuxUnix

CONTINGENCY PLANNING

2.1.1 Backup Policy in PlaceCIS MySQL 8.0 Enterprise Linux OS L1 v1.4.0Unix

CONTINGENCY PLANNING

3.1 Ensure 'datadir' Has Appropriate PermissionsCIS MySQL 5.6 Enterprise Windows OS L1 v2.0.0Windows

ACCESS CONTROL, MEDIA PROTECTION

3.1 Ensure 'datadir' Has Appropriate PermissionsCIS MySQL 5.7 Community Linux OS L1 v2.0.0Unix

ACCESS CONTROL, MEDIA PROTECTION

3.1 Ensure 'datadir' Has Appropriate PermissionsCIS MySQL 5.7 Enterprise Windows OS L1 v2.0.0Windows

ACCESS CONTROL, MEDIA PROTECTION

3.2 Ensure 'log_bin_basename' Files Have Appropriate PermissionsCIS MySQL 5.6 Enterprise Linux OS L1 v2.0.0Unix

ACCESS CONTROL, MEDIA PROTECTION

3.7 Ensure SSL Key Files Have Appropriate PermissionsCIS MySQL 5.7 Community Database L1 v2.0.0MySQLDB

ACCESS CONTROL, MEDIA PROTECTION

3.7 Ensure SSL Key Files Have Appropriate PermissionsCIS MySQL 5.7 Enterprise Database L1 v2.0.0MySQLDB

ACCESS CONTROL, MEDIA PROTECTION

3.9 Secure MySQL Keyring - keyring_aws_conf_fileCIS MySQL 5.7 Community Linux OS L1 v2.0.0Unix

ACCESS CONTROL, MEDIA PROTECTION

3.9 Secure MySQL Keyring - keyring_encrypted_file_data_pathCIS MySQL 5.7 Community Linux OS L1 v2.0.0Unix

ACCESS CONTROL, MEDIA PROTECTION

3.10 Secure MySQL Keyring - keyring_encrypted_file_data_pathCIS MySQL 5.7 Enterprise Linux OS L1 v2.0.0Unix

ACCESS CONTROL, MEDIA PROTECTION

4.1 - System Administration Methods - Login BannerNetApp Security Hardening Guide for ONTAP 9 v1.7.0Netapp_API

ACCESS CONTROL

4.1 Configure Local Configuration Backup ScheduleCIS Cisco NX-OS v1.2.0 L1Cisco

CONTINGENCY PLANNING

4.1 Ensure 'maxAllowedContentLength' is configured - ApplicationsCIS IIS 10 v1.2.1 Level 2Windows

SYSTEM AND SERVICES ACQUISITION

4.1 Ensure 'maxAllowedContentLength' is configured - ApplicationsCIS IIS 7 L2 v1.8.0Windows

SYSTEM AND INFORMATION INTEGRITY

4.1 Ensure 'maxAllowedContentLength' is configured - DefaultCIS IIS 10 v1.2.1 Level 2Windows

SYSTEM AND SERVICES ACQUISITION

4.1 Ensure sudo is configured correctlyCIS PostgreSQL 15 OS v1.1.0Unix

ACCESS CONTROL

4.1 Ensure sudo is configured correctlyCIS PostgreSQL 9.6 OS v1.0.0Unix

ACCESS CONTROL

4.1 Ensure sudo is configured correctlyCIS PostgreSQL 9.5 OS v1.1.0Unix

ACCESS CONTROL

4.1 Ensure sudo is configured correctlyCIS PostgreSQL 10 OS v1.0.0Unix

ACCESS CONTROL

4.1 Ensure sudo is configured correctlyCIS PostgreSQL 16 OS v1.0.0Unix

ACCESS CONTROL

4.1 Ensure sufficient space for logsCIS Sybase 15.0 L2 DB v1.1.0SybaseDB
4.4 Capture syslog AUTH Messages - Check if auth.info is set to var/log/authlogCIS Solaris 10 L1 v5.2Unix
4.7 Ensure the 'daemon_memcached' Plugin Is DisabledCIS MySQL 5.6 Enterprise Database L1 v2.0.0MySQLDB

CONFIGURATION MANAGEMENT

4.7 Ensure the 'daemon_memcached' Plugin is DisabledCIS MySQL 8.0 Community Database L1 v1.1.0MySQLDB

CONFIGURATION MANAGEMENT

4.7 Ensure the 'daemon_memcached' Plugin is DisabledCIS Oracle MySQL Community Server 8.4 v1.0.0 L1 DatabaseMySQLDB

CONFIGURATION MANAGEMENT

4.7 Ensure the 'daemon_memcached' Plugin is DisabledCIS MySQL 8.4 Enterprise v1.0.0 L1 DatabaseMySQLDB

CONFIGURATION MANAGEMENT

5.1 Default Service File Creation MaskCIS Solaris 11 L1 v1.1.0Unix
5.1 Ensure Java is disabledCIS Sybase 15.0 L1 DB v1.1.0SybaseDB

CONFIGURATION MANAGEMENT

6.9 Harden host operating systemCIS Sybase 15.0 L1 DB v1.1.0SybaseDB
7.2 Set Password Expiration Parameters on Active Accounts - Check MAXWEEKS is set to 13CIS Solaris 10 L1 v5.2Unix

IDENTIFICATION AND AUTHENTICATION

7.3 Set Strong Password Creation Policies - Check DICTIONDBDIR is set to /var/passwdCIS Solaris 10 L1 v5.2Unix

IDENTIFICATION AND AUTHENTICATION

7.3 Set Strong Password Creation Policies - Check MAXREPEATS is set to 0CIS Solaris 10 L1 v5.2Unix

IDENTIFICATION AND AUTHENTICATION

7.3 Set Strong Password Creation Policies - Check MINDIFF is set to 3CIS Solaris 10 L1 v5.2Unix

IDENTIFICATION AND AUTHENTICATION

7.3 Set Strong Password Creation Policies - MINALPHA is set to 2CIS Solaris 10 L1 v5.2Unix

IDENTIFICATION AND AUTHENTICATION

7.3 Set Strong Password Creation Policies - MINNONALPHA is set to 1CIS Solaris 10 L1 v5.2Unix

IDENTIFICATION AND AUTHENTICATION

7.8 Ensure No Anonymous Accounts ExistCIS MySQL 5.6 Enterprise Database L1 v2.0.0MySQLDB

ACCESS CONTROL

7.8 Ensure No Anonymous Accounts ExistCIS MySQL 5.7 Enterprise Database L1 v2.0.0MySQLDB

ACCESS CONTROL

7.9 Lock Inactive User Accounts - Check if definact is set to 35.CIS Solaris 10 L1 v5.2Unix

ACCESS CONTROL

8.2 Create Warning Banner for CDE Users - Check if 'Dtlogin*greeting.labelString' is not set to default string.CIS Solaris 10 L1 v5.2Unix

ACCESS CONTROL

9.4 Ensure 'super_priv' is Not Set to 'Y' for Replication UsersCIS MySQL 8.0 Community Database L1 v1.1.0MySQLDB

ACCESS CONTROL

9.4 Ensure 'super_priv' is Not Set to 'Y' for Replication UsersCIS Oracle MySQL Enterprise Edition 8.0 v1.4.0 L1 DatabaseMySQLDB

ACCESS CONTROL

CIS_Ubuntu_16.04_LTS_Server_v2.0.0_L2.audit from CIS Ubuntu 16.04 LTS Server Benchmark L2 v2.0.0CIS Ubuntu Linux 16.04 LTS Server L2 v2.0.0Unix
CIS_Ubuntu_16.04_LTS_Workstation_v2.0.0_L2.audit from CIS Ubuntu 16.04 LTS Workstation Benchmark L2 v2.0.0CIS Ubuntu Linux 16.04 LTS Workstation L2 v2.0.0Unix