Item Search

NameAudit NamePluginCategory
GEN005538 - The SSH daemon must not allow rhosts RSA authentication.DISA STIG Solaris 10 X86 v2r4Unix

CONFIGURATION MANAGEMENT

GEN005539 - The SSH daemon must not allow compression or must only allow compression after successful authentication.DISA STIG Solaris 10 X86 v2r4Unix

CONFIGURATION MANAGEMENT

GEN005560 - The system must be configured with a default gateway for IPv4 if the system uses IPv4, unless the system is a router.DISA STIG Solaris 10 X86 v2r4Unix

CONFIGURATION MANAGEMENT

GEN005610 - The system must not have IP forwarding for IPv6 enabled, unless the system is an IPv6 router.DISA STIG Solaris 10 X86 v2r4Unix

CONFIGURATION MANAGEMENT

GEN005770 - The NFS exports configuration file must not have an extended ACL.DISA STIG Solaris 10 X86 v2r4Unix

CONFIGURATION MANAGEMENT

GEN006000 - The system must not have a public Instant Messaging (IM) client installed.DISA STIG Solaris 10 X86 v2r4Unix

CONFIGURATION MANAGEMENT

GEN006140 - The smb.conf file must have mode 0644 or less permissive.DISA STIG Solaris 10 X86 v2r4Unix

ACCESS CONTROL

GEN006200 - The smbpasswd file must have mode 0600 or less permissive.DISA STIG Solaris 10 X86 v2r4Unix

ACCESS CONTROL

GEN006220 - The smb.conf file must use the hosts option to restrict access to Samba.DISA STIG Solaris 10 X86 v2r4Unix

CONFIGURATION MANAGEMENT

GEN006340 - Files in /etc/news must be owned by root - /etc/news/*DISA STIG Solaris 10 X86 v2r4Unix

CONFIGURATION MANAGEMENT

GEN006360 - The files in /etc/news must be group-owned by root - /etc/newsDISA STIG Solaris 10 X86 v2r4Unix

CONFIGURATION MANAGEMENT

GEN006380 - The system must not use UDP for NIS/NIS+.DISA STIG Solaris 10 X86 v2r4Unix

CONFIGURATION MANAGEMENT

GEN006460 - Any NIS+ server must be operating at security level 2.DISA STIG Solaris 10 X86 v2r4Unix

CONFIGURATION MANAGEMENT

GEN006480 - The system must have a host-based intrusion detection tool installed.DISA STIG Solaris 10 X86 v2r4Unix

SYSTEM AND INFORMATION INTEGRITY

GEN006575 - The file integrity tool must use FIPS 140-2 approved cryptographic hashes for validating file contents - configDISA STIG Solaris 10 X86 v2r4Unix

AUDIT AND ACCOUNTABILITY

GEN007480 - The Reliable Datagram Sockets (RDS) protocol must be disabled or not installed unless required.DISA STIG Solaris 10 X86 v2r4Unix

CONFIGURATION MANAGEMENT

GEN007950 - The system must not respond to ICMPv6 echo requests sent to a broadcast address - dladm show-linkDISA STIG Solaris 10 X86 v2r4Unix

CONFIGURATION MANAGEMENT

GEN007950 - The system must not respond to ICMPv6 echo requests sent to a broadcast address.DISA STIG Solaris 10 X86 v2r4Unix

CONFIGURATION MANAGEMENT

GEN008060 - If the system is using LDAP for authentication or account information the LDAP client configuration file must have mode 0600 or less permissive - /var/ldap/ldap_client_fileDISA STIG Solaris 10 X86 v2r4Unix

CONFIGURATION MANAGEMENT

GEN008180 - If the system is using LDAP for authentication or account information, the TLS certificate authority file and/or directory (as appropriate) must have mode 0644 (0755 for directories) or less permissive - key3.dbDISA STIG Solaris 10 X86 v2r4Unix

CONFIGURATION MANAGEMENT

GEN008440 - Automated file system mounting tools must not be enabled unless needed.DISA STIG Solaris 10 X86 v2r4Unix

CONFIGURATION MANAGEMENT

GEN008600 - The system must be configured to only boot from the system boot device.DISA STIG Solaris 10 X86 v2r4Unix

CONFIGURATION MANAGEMENT

GEN008680 - If the system boots from removable media, it must be stored in a safe or similarly secured container.DISA STIG Solaris 10 X86 v2r4Unix

CONFIGURATION MANAGEMENT

GEN008820 - The system package management tool must not automatically obtain updates - /var/spool/cron/atjobs/*DISA STIG Solaris 10 X86 v2r4Unix

SYSTEM AND INFORMATION INTEGRITY

UBTU-16-010120 - The Ubuntu operating system must enforce password complexity by requiring that at least one numeric character be used.DISA STIG Ubuntu 16.04 LTS v2r3Unix

IDENTIFICATION AND AUTHENTICATION

UBTU-16-010140 - The Ubuntu operating system must require the change of at least 8 characters when passwords are changed.DISA STIG Ubuntu 16.04 LTS v2r3Unix

IDENTIFICATION AND AUTHENTICATION

UBTU-16-010291 - Accounts on the Ubuntu operating system that are subject to three unsuccessful logon attempts within 15 minutes must be locked for the maximum configurable period - unlock_timeDISA STIG Ubuntu 16.04 LTS v2r3Unix

ACCESS CONTROL

UBTU-16-010300 - The Ubuntu operating system must require users to re-authenticate for privilege escalation and changing roles - sudoersDISA STIG Ubuntu 16.04 LTS v2r3Unix

IDENTIFICATION AND AUTHENTICATION

UBTU-16-010340 - The Ubuntu operating system must display the date and time of the last successful account logon upon logon.DISA STIG Ubuntu 16.04 LTS v2r3Unix

CONFIGURATION MANAGEMENT

UBTU-16-010400 - All persistent disk partitions must implement cryptographic mechanisms to prevent unauthorized disclosure or modification of all information that requires at rest protection.DISA STIG Ubuntu 16.04 LTS v2r3Unix

SYSTEM AND COMMUNICATIONS PROTECTION

UBTU-16-010650 - The Ubuntu operating system must not have unnecessary accounts.DISA STIG Ubuntu 16.04 LTS v2r3Unix

CONFIGURATION MANAGEMENT

UBTU-16-010720 - All local interactive users must have a home directory assigned in the /etc/passwd file.DISA STIG Ubuntu 16.04 LTS v2r3Unix

CONFIGURATION MANAGEMENT

UBTU-16-010740 - All local interactive user home directories defined in the /etc/passwd file must exist.DISA STIG Ubuntu 16.04 LTS v2r3Unix

CONFIGURATION MANAGEMENT

UBTU-16-010760 - All local interactive user home directories must be group-owned by the home directory owners primary group.DISA STIG Ubuntu 16.04 LTS v2r3Unix

CONFIGURATION MANAGEMENT

UBTU-16-010780 - All local interactive user initialization files executable search paths must contain only paths that resolve to the system default or the users home directory.DISA STIG Ubuntu 16.04 LTS v2r3Unix

CONFIGURATION MANAGEMENT

UBTU-16-010980 - The /var/log/syslog file must be owned by syslog.DISA STIG Ubuntu 16.04 LTS v2r3Unix

SYSTEM AND INFORMATION INTEGRITY

UBTU-16-020050 - The System Administrator (SA) and Information System Security Officer (ISSO) (at a minimum) must be alerted when the audit storage volume is full.DISA STIG Ubuntu 16.04 LTS v2r3Unix

AUDIT AND ACCOUNTABILITY

UBTU-16-020180 - Audit tools must have a mode of 0755 or less permissive - audispdDISA STIG Ubuntu 16.04 LTS v2r3Unix

AUDIT AND ACCOUNTABILITY

UBTU-16-020180 - Audit tools must have a mode of 0755 or less permissive - auditdDISA STIG Ubuntu 16.04 LTS v2r3Unix

AUDIT AND ACCOUNTABILITY

UBTU-16-020180 - Audit tools must have a mode of 0755 or less permissive - aureportDISA STIG Ubuntu 16.04 LTS v2r3Unix

AUDIT AND ACCOUNTABILITY

UBTU-16-020180 - Audit tools must have a mode of 0755 or less permissive - autraceDISA STIG Ubuntu 16.04 LTS v2r3Unix

AUDIT AND ACCOUNTABILITY

UBTU-16-020190 - Audit tools must be owned by root - ausearchDISA STIG Ubuntu 16.04 LTS v2r3Unix

AUDIT AND ACCOUNTABILITY

UBTU-16-020200 - Audit tools must be group-owned by root - auditctlDISA STIG Ubuntu 16.04 LTS v2r3Unix

AUDIT AND ACCOUNTABILITY

UBTU-16-020200 - Audit tools must be group-owned by root - auditdDISA STIG Ubuntu 16.04 LTS v2r3Unix

AUDIT AND ACCOUNTABILITY

UBTU-16-020200 - Audit tools must be group-owned by root - augenrulesDISA STIG Ubuntu 16.04 LTS v2r3Unix

AUDIT AND ACCOUNTABILITY

UBTU-16-020200 - Audit tools must be group-owned by root - autraceDISA STIG Ubuntu 16.04 LTS v2r3Unix

AUDIT AND ACCOUNTABILITY

UBTU-16-020310 - The Ubuntu operating system must generate audit records for all account creations, modifications, disabling, and termination events that affect /etc/group.DISA STIG Ubuntu 16.04 LTS v2r3Unix

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY, MAINTENANCE

UBTU-16-020360 - Successful/unsuccessful uses of the su command must generate an audit record.DISA STIG Ubuntu 16.04 LTS v2r3Unix

AUDIT AND ACCOUNTABILITY, MAINTENANCE

UBTU-16-020410 - Successful/unsuccessful uses of the ssh-keysign command must generate an audit record.DISA STIG Ubuntu 16.04 LTS v2r3Unix

AUDIT AND ACCOUNTABILITY, MAINTENANCE

UBTU-16-020460 - The audit system must be configured to audit any usage of the setxattr system call - root b32DISA STIG Ubuntu 16.04 LTS v2r3Unix

AUDIT AND ACCOUNTABILITY, MAINTENANCE