Item Search

NameAudit NamePluginCategory
1.1.1.8 Ensure udf kernel module is not availableCIS Oracle Linux 10 v1.0.0 L2 ServerUnix

CONFIGURATION MANAGEMENT

1.1.1.9 Ensure firewire-core kernel module is not availableCIS Oracle Linux 10 v1.0.0 L2 WorkstationUnix

CONFIGURATION MANAGEMENT

1.1.1.10 Ensure usb-storage kernel module is not availableCIS Oracle Linux 10 v1.0.0 L2 WorkstationUnix

IDENTIFICATION AND AUTHENTICATION

1.1.2.3.1 Ensure separate partition exists for /homeCIS Oracle Linux 10 v1.0.0 L2 WorkstationUnix

ACCESS CONTROL, CONFIGURATION MANAGEMENT, MEDIA PROTECTION

1.1.2.3.1 Ensure separate partition exists for /homeCIS Rocky Linux 10 v1.0.0 L2 ServerUnix

ACCESS CONTROL, CONFIGURATION MANAGEMENT, MEDIA PROTECTION

1.1.2.4.1 Ensure separate partition exists for /varCIS Oracle Linux 10 v1.0.0 L2 ServerUnix

ACCESS CONTROL, CONFIGURATION MANAGEMENT, MEDIA PROTECTION

1.1.2.4.1 Ensure separate partition exists for /varCIS Oracle Linux 10 v1.0.0 L2 WorkstationUnix

ACCESS CONTROL, CONFIGURATION MANAGEMENT, MEDIA PROTECTION

1.2.1.3 Ensure repo_gpgcheck is globally activatedCIS Oracle Linux 10 v1.0.0 L2 ServerUnix

RISK ASSESSMENT, SYSTEM AND INFORMATION INTEGRITY

1.2.1.5 Ensure weak dependencies are configuredCIS Oracle Linux 10 v1.0.0 L2 ServerUnix

CONFIGURATION MANAGEMENT

1.3.1.6 Ensure no unconfined services existCIS Oracle Linux 10 v1.0.0 L2 WorkstationUnix

ACCESS CONTROL, MEDIA PROTECTION

1.8.6 Ensure Xwayland is configuredCIS Rocky Linux 10 v1.0.0 L2 ServerUnix

CONFIGURATION MANAGEMENT

2.1.1 Ensure autofs services are not in useCIS Oracle Linux 10 v1.0.0 L2 WorkstationUnix

MEDIA PROTECTION, SYSTEM AND INFORMATION INTEGRITY

2.1.2 Ensure avahi daemon services are not in useCIS Oracle Linux 10 v1.0.0 L2 WorkstationUnix

CONFIGURATION MANAGEMENT, SYSTEM AND INFORMATION INTEGRITY

2.1.3 Ensure cockpit web services are not in useCIS Rocky Linux 10 v1.0.0 L2 ServerUnix

CONFIGURATION MANAGEMENT

2.1.19 Ensure GNOME Display Manager is removedCIS Oracle Linux 10 v1.0.0 L2 ServerUnix

CONFIGURATION MANAGEMENT

2.1.20 Ensure X window server services are not in useCIS Rocky Linux 10 v1.0.0 L2 ServerUnix

CONFIGURATION MANAGEMENT

2.2.2 Ensure ldap client is not installedCIS Rocky Linux 10 v1.0.0 L2 ServerUnix

CONFIGURATION MANAGEMENT

3.1.3 Ensure bluetooth services are not in useCIS Oracle Linux 10 v1.0.0 L2 WorkstationUnix

CONFIGURATION MANAGEMENT

3.3.1.1 Ensure net.ipv4.ip_forward is configuredCIS Rocky Linux 10 v1.0.0 L2 ServerUnix

CONFIGURATION MANAGEMENT

5.3.2.1.3 Ensure password failed attempts lockout includes root accountCIS Oracle Linux 10 v1.0.0 L2 WorkstationUnix

ACCESS CONTROL

6.3.1.2 Ensure auditing for processes that start prior to auditd is enabledCIS Oracle Linux 10 v1.0.0 L2 ServerUnix

AUDIT AND ACCOUNTABILITY

6.3.1.2 Ensure auditing for processes that start prior to auditd is enabledCIS Rocky Linux 10 v1.0.0 L2 ServerUnix

AUDIT AND ACCOUNTABILITY

6.3.1.4 Ensure auditd service is enabled and activeCIS Rocky Linux 10 v1.0.0 L2 ServerUnix

AUDIT AND ACCOUNTABILITY

6.3.3.1 Ensure modification of the /etc/sudoers file is collectedCIS Rocky Linux 10 v1.0.0 L2 WorkstationUnix

AUDIT AND ACCOUNTABILITY, MAINTENANCE

6.3.3.1 Ensure modification of the /etc/sudoers file is collectedCIS Rocky Linux 10 v1.0.0 L2 ServerUnix

AUDIT AND ACCOUNTABILITY, MAINTENANCE

6.3.3.3 Ensure events that modify the sudo log file are collectedCIS Oracle Linux 10 v1.0.0 L2 ServerUnix

AUDIT AND ACCOUNTABILITY

6.3.3.4 Ensure events that modify date and time information are collectedCIS Oracle Linux 10 v1.0.0 L2 ServerUnix

AUDIT AND ACCOUNTABILITY, CONFIGURATION MANAGEMENT

6.3.3.5 Ensure events that modify sethostname and setdomainname are collectedCIS Oracle Linux 10 v1.0.0 L2 WorkstationUnix

AUDIT AND ACCOUNTABILITY, CONFIGURATION MANAGEMENT

6.3.3.6 Ensure events that modify /etc/issue and /etc/issue.net are collectedCIS Oracle Linux 10 v1.0.0 L2 WorkstationUnix

AUDIT AND ACCOUNTABILITY, CONFIGURATION MANAGEMENT

6.3.3.8 Ensure events that modify /etc/sysconfig/network and /etc/NetworkManager/system-connections/ are collectedCIS Oracle Linux 10 v1.0.0 L2 ServerUnix

AUDIT AND ACCOUNTABILITY, CONFIGURATION MANAGEMENT

6.3.3.14 Ensure events that modify /etc/shadow and /etc/gshadow are collectedCIS Oracle Linux 10 v1.0.0 L2 WorkstationUnix

AUDIT AND ACCOUNTABILITY

6.3.3.15 Ensure events that modify /etc/security/opasswd are collectedCIS Rocky Linux 10 v1.0.0 L2 WorkstationUnix

AUDIT AND ACCOUNTABILITY

6.3.3.19 Ensure discretionary access control permission modification events chown,fchown,lchown,fchownat are collectedCIS Rocky Linux 10 v1.0.0 L2 WorkstationUnix

AUDIT AND ACCOUNTABILITY

6.3.3.21 Ensure successful file system mounts are collectedCIS Rocky Linux 10 v1.0.0 L2 WorkstationUnix

AUDIT AND ACCOUNTABILITY

6.3.3.21 Ensure successful file system mounts are collectedCIS Rocky Linux 10 v1.0.0 L2 ServerUnix

AUDIT AND ACCOUNTABILITY

6.3.3.22 Ensure session initiation information is collectedCIS Oracle Linux 10 v1.0.0 L2 ServerUnix

AUDIT AND ACCOUNTABILITY

6.3.3.23 Ensure login and logout events are collectedCIS Rocky Linux 10 v1.0.0 L2 WorkstationUnix

AUDIT AND ACCOUNTABILITY

6.3.3.23 Ensure login and logout events are collectedCIS Oracle Linux 10 v1.0.0 L2 WorkstationUnix

AUDIT AND ACCOUNTABILITY

6.3.3.29 Ensure successful and unsuccessful attempts to use the chacl command are collectedCIS Oracle Linux 10 v1.0.0 L2 ServerUnix

AUDIT AND ACCOUNTABILITY, SYSTEM AND INFORMATION INTEGRITY

6.3.3.30 Ensure successful and unsuccessful attempts to use the usermod command are collectedCIS Oracle Linux 10 v1.0.0 L2 WorkstationUnix

AUDIT AND ACCOUNTABILITY

6.3.3.32 Ensure kernel "init_module" and "finit_module" loading unloading and modification is collectedCIS Oracle Linux 10 v1.0.0 L2 ServerUnix

AUDIT AND ACCOUNTABILITY

6.3.3.35 Ensure the audit configuration is loaded regardless of errorsCIS Oracle Linux 10 v1.0.0 L2 WorkstationUnix

AUDIT AND ACCOUNTABILITY

6.3.3.37 Ensure the running and on disk configuration is the sameCIS Rocky Linux 10 v1.0.0 L2 WorkstationUnix

AUDIT AND ACCOUNTABILITY

6.3.3.37 Ensure the running and on disk configuration is the sameCIS Oracle Linux 10 v1.0.0 L2 WorkstationUnix

AUDIT AND ACCOUNTABILITY

6.3.4.2 Ensure audit log files mode is configuredCIS Oracle Linux 10 v1.0.0 L2 WorkstationUnix

ACCESS CONTROL, MEDIA PROTECTION

6.3.4.3 Ensure audit log files owner is configuredCIS Oracle Linux 10 v1.0.0 L2 ServerUnix

ACCESS CONTROL, CONFIGURATION MANAGEMENT, MEDIA PROTECTION

6.3.4.5 Ensure audit configuration files mode is configuredCIS Oracle Linux 10 v1.0.0 L2 WorkstationUnix

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY, MEDIA PROTECTION

6.3.4.7 Ensure audit configuration files group owner is configuredCIS Rocky Linux 10 v1.0.0 L2 WorkstationUnix

ACCESS CONTROL, MEDIA PROTECTION

6.3.4.8 Ensure audit tools mode is configuredCIS Oracle Linux 10 v1.0.0 L2 WorkstationUnix

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY, MEDIA PROTECTION

6.3.4.10 Ensure audit tools group owner is configuredCIS Oracle Linux 10 v1.0.0 L2 ServerUnix

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY, MEDIA PROTECTION