Item Search

NameAudit NamePluginCategory
1.1.1.4 Ensure hfsplus kernel module is not availableCIS Oracle Linux 9 v3.0.0 L1 ServerUnix

CONFIGURATION MANAGEMENT

1.1.1.9 Ensure firewire-core kernel module is not availableCIS Oracle Linux 9 v3.0.0 L1 ServerUnix

CONFIGURATION MANAGEMENT

1.1.2.1.4 Ensure noexec option set on /tmp partitionCIS Oracle Linux 9 v3.0.0 L1 ServerUnix

ACCESS CONTROL, CONFIGURATION MANAGEMENT, MEDIA PROTECTION

1.1.2.3.2 Ensure nodev option set on /home partitionCIS Oracle Linux 9 v3.0.0 L1 ServerUnix

ACCESS CONTROL, MEDIA PROTECTION

1.3.1.4 Ensure the SELinux mode is not disabledCIS Oracle Linux 9 v3.0.0 L1 ServerUnix

ACCESS CONTROL, MEDIA PROTECTION, SYSTEM AND COMMUNICATIONS PROTECTION

1.5.7 Ensure kernel.yama.ptrace_scope is configuredCIS Oracle Linux 9 v3.0.0 L1 ServerUnix

CONFIGURATION MANAGEMENT

1.8.4 Ensure GDM automount is configuredCIS Oracle Linux 9 v3.0.0 L1 ServerUnix

IDENTIFICATION AND AUTHENTICATION, MEDIA PROTECTION

2.1.15 Ensure telnet server services are not in useCIS Oracle Linux 9 v3.0.0 L1 ServerUnix

CONFIGURATION MANAGEMENT

2.3.2 Ensure chrony is configuredCIS Oracle Linux 9 v3.0.0 L1 ServerUnix

AUDIT AND ACCOUNTABILITY

2.4.1.6 Ensure access to /etc/cron.monthly is configuredCIS Oracle Linux 9 v3.0.0 L1 ServerUnix

ACCESS CONTROL, MEDIA PROTECTION

2.4.1.7 Ensure access to /etc/cron.yearly is configuredCIS Oracle Linux 9 v3.0.0 L1 ServerUnix

ACCESS CONTROL, MEDIA PROTECTION

2.4.1.8 Ensure access to /etc/cron.d is configuredCIS Oracle Linux 9 v3.0.0 L1 ServerUnix

ACCESS CONTROL, MEDIA PROTECTION

2.4.1.9 Ensure access to crontab is configuredCIS Oracle Linux 9 v3.0.0 L1 ServerUnix

ACCESS CONTROL, MEDIA PROTECTION

2.4.2.1 Ensure access to at is configuredCIS Oracle Linux 9 v3.0.0 L1 ServerUnix

ACCESS CONTROL, MEDIA PROTECTION

3.1.3 Ensure bluetooth services are not in useCIS Oracle Linux 9 v3.0.0 L1 ServerUnix

CONFIGURATION MANAGEMENT

3.2.1 Ensure dccp kernel module is not availableCIS Oracle Linux 9 v3.0.0 L1 ServerUnix

CONFIGURATION MANAGEMENT

3.2.2 Ensure tipc kernel module is not availableCIS Oracle Linux 9 v3.0.0 L1 ServerUnix

CONFIGURATION MANAGEMENT

3.2.5 Ensure atm kernel module is not availableCIS Oracle Linux 9 v3.0.0 L1 ServerUnix

CONFIGURATION MANAGEMENT

3.3.1.8 Ensure net.ipv4.conf.all.accept_redirects is configuredCIS Oracle Linux 9 v3.0.0 L1 ServerUnix

CONFIGURATION MANAGEMENT

3.3.1.16 Ensure net.ipv4.conf.all.log_martians is configuredCIS Oracle Linux 9 v3.0.0 L1 ServerUnix

AUDIT AND ACCOUNTABILITY, CONFIGURATION MANAGEMENT

3.3.1.18 Ensure net.ipv4.tcp_syncookies is configuredCIS Oracle Linux 9 v3.0.0 L1 ServerUnix

SYSTEM AND COMMUNICATIONS PROTECTION

3.3.2.5 Ensure net.ipv6.conf.all.accept_source_route is configuredCIS Oracle Linux 9 v3.0.0 L1 ServerUnix

CONFIGURATION MANAGEMENT

5.1.1 Ensure access to /etc/ssh/sshd_config is configuredCIS Oracle Linux 9 v3.0.0 L1 ServerUnix

ACCESS CONTROL, MEDIA PROTECTION

5.1.5 Ensure sshd Ciphers are configuredCIS Oracle Linux 9 v3.0.0 L1 ServerUnix

ACCESS CONTROL, IDENTIFICATION AND AUTHENTICATION, SYSTEM AND COMMUNICATIONS PROTECTION

5.1.14 Ensure sshd IgnoreRhosts is enabledCIS Oracle Linux 9 v3.0.0 L1 ServerUnix

CONFIGURATION MANAGEMENT, IDENTIFICATION AND AUTHENTICATION

5.1.16 Ensure sshd LogLevel is configuredCIS Oracle Linux 9 v3.0.0 L1 ServerUnix

AUDIT AND ACCOUNTABILITY, SYSTEM AND INFORMATION INTEGRITY

5.1.20 Ensure sshd PermitEmptyPasswords is disabledCIS Oracle Linux 9 v3.0.0 L1 ServerUnix

CONFIGURATION MANAGEMENT, IDENTIFICATION AND AUTHENTICATION

5.2.1 Ensure sudo is installedCIS Oracle Linux 9 v3.0.0 L1 ServerUnix

ACCESS CONTROL

5.2.12 Ensure access to the su command is restrictedCIS Oracle Linux 9 v3.0.0 L1 ServerUnix

ACCESS CONTROL, MEDIA PROTECTION

5.3.1.1 Ensure latest version of pam is installedCIS Oracle Linux 9 v3.0.0 L1 ServerUnix

SYSTEM AND INFORMATION INTEGRITY

5.3.1.3 Ensure latest version of libpwquality is installedCIS Oracle Linux 9 v3.0.0 L1 ServerUnix

SYSTEM AND INFORMATION INTEGRITY

5.3.2.2 Ensure pam_faillock module is enabledCIS Oracle Linux 9 v3.0.0 L1 ServerUnix

ACCESS CONTROL

5.3.2.5 Ensure pam_unix module is enabledCIS Oracle Linux 9 v3.0.0 L1 ServerUnix

IDENTIFICATION AND AUTHENTICATION

5.3.3.2.2 Ensure password length is configuredCIS Oracle Linux 9 v3.0.0 L1 ServerUnix

IDENTIFICATION AND AUTHENTICATION

5.3.3.2.7 Ensure password quality is enforced for the root userCIS Oracle Linux 9 v3.0.0 L1 ServerUnix

IDENTIFICATION AND AUTHENTICATION

5.3.3.3.1 Ensure password history remember is configuredCIS Oracle Linux 9 v3.0.0 L1 ServerUnix

IDENTIFICATION AND AUTHENTICATION

5.3.3.4.3 Ensure pam_unix includes a strong password hashing algorithmCIS Oracle Linux 9 v3.0.0 L1 ServerUnix

IDENTIFICATION AND AUTHENTICATION, SYSTEM AND COMMUNICATIONS PROTECTION

5.4.2.2 Ensure root is the only GID 0 accountCIS Oracle Linux 9 v3.0.0 L1 ServerUnix

ACCESS CONTROL, CONFIGURATION MANAGEMENT, IDENTIFICATION AND AUTHENTICATION

5.4.2.3 Ensure group root is the only GID 0 groupCIS Oracle Linux 9 v3.0.0 L1 ServerUnix

ACCESS CONTROL, CONFIGURATION MANAGEMENT, IDENTIFICATION AND AUTHENTICATION

5.4.2.4 Ensure root account access is controlledCIS Oracle Linux 9 v3.0.0 L1 ServerUnix

ACCESS CONTROL

5.4.2.5 Ensure root path integrityCIS Oracle Linux 9 v3.0.0 L1 ServerUnix

CONFIGURATION MANAGEMENT, IDENTIFICATION AND AUTHENTICATION

6.1.1.1 Ensure journald service is activeCIS Oracle Linux 9 v3.0.0 L1 ServerUnix

AUDIT AND ACCOUNTABILITY, SYSTEM AND COMMUNICATIONS PROTECTION

6.1.2.7 Ensure rsyslog is not configured as a log serverCIS Oracle Linux 9 v3.0.0 L1 ServerUnix

AUDIT AND ACCOUNTABILITY, CONFIGURATION MANAGEMENT

6.3.3 Ensure cryptographic mechanisms are used to protect the integrity of audit toolsCIS Oracle Linux 9 v3.0.0 L1 ServerUnix

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY, SYSTEM AND INFORMATION INTEGRITY

7.1.2 Ensure access to /etc/passwd- is configuredCIS Oracle Linux 9 v3.0.0 L1 ServerUnix

ACCESS CONTROL, MEDIA PROTECTION

7.1.3 Ensure access to /etc/group is configuredCIS Oracle Linux 9 v3.0.0 L1 ServerUnix

ACCESS CONTROL, MEDIA PROTECTION

7.1.6 Ensure access to /etc/shadow- is configuredCIS Oracle Linux 9 v3.0.0 L1 ServerUnix

ACCESS CONTROL, MEDIA PROTECTION

7.1.8 Ensure access to /etc/gshadow- is configuredCIS Oracle Linux 9 v3.0.0 L1 ServerUnix

ACCESS CONTROL, MEDIA PROTECTION

7.2.7 Ensure no duplicate group names existCIS Oracle Linux 9 v3.0.0 L1 ServerUnix

ACCESS CONTROL

7.2.9 Ensure local interactive user dot files access is configuredCIS Oracle Linux 9 v3.0.0 L1 ServerUnix

ACCESS CONTROL, MEDIA PROTECTION