Item Search

NameAudit NamePluginCategory
1.1.1.2 Ensure freevxfs kernel module is not availableCIS Oracle Linux 10 v1.0.0 L1 WorkstationUnix

CONFIGURATION MANAGEMENT

1.1.1.5 Ensure jffs2 kernel module is not availableCIS Oracle Linux 10 v1.0.0 L1 WorkstationUnix

CONFIGURATION MANAGEMENT

1.1.1.11 Ensure unused filesystems kernel modules are not availableCIS Oracle Linux 10 v1.0.0 L1 WorkstationUnix

CONFIGURATION MANAGEMENT

1.1.2.1.2 Ensure nodev option set on /tmp partitionCIS Oracle Linux 10 v1.0.0 L1 WorkstationUnix

ACCESS CONTROL, CONFIGURATION MANAGEMENT, MEDIA PROTECTION

1.1.2.2.1 Ensure /dev/shm is tmpfs or a separate partitionCIS Oracle Linux 10 v1.0.0 L1 WorkstationUnix

ACCESS CONTROL, CONFIGURATION MANAGEMENT, MEDIA PROTECTION

1.6.3 Ensure system wide crypto policy macs are configuredCIS Oracle Linux 10 v1.0.0 L1 ServerUnix

ACCESS CONTROL, IDENTIFICATION AND AUTHENTICATION, SYSTEM AND COMMUNICATIONS PROTECTION

1.6.4 Ensure system wide crypto policy disables cbc for sshCIS Oracle Linux 10 v1.0.0 L1 ServerUnix

ACCESS CONTROL, IDENTIFICATION AND AUTHENTICATION, SYSTEM AND COMMUNICATIONS PROTECTION

1.7.2 Ensure /etc/issue is configuredCIS Oracle Linux 10 v1.0.0 L1 ServerUnix

CONFIGURATION MANAGEMENT

1.7.3 Ensure /etc/issue.net is configuredCIS Oracle Linux 10 v1.0.0 L1 ServerUnix

CONFIGURATION MANAGEMENT

1.8.3 Ensure GDM screen lock is configuredCIS Oracle Linux 10 v1.0.0 L1 ServerUnix

ACCESS CONTROL

1.8.4 Ensure GDM automount is configuredCIS Oracle Linux 10 v1.0.0 L1 ServerUnix

IDENTIFICATION AND AUTHENTICATION, MEDIA PROTECTION

2.1.6 Ensure dnsmasq services are not in useCIS Oracle Linux 10 v1.0.0 L1 ServerUnix

CONFIGURATION MANAGEMENT

2.1.10 Ensure print server services are not in useCIS Oracle Linux 10 v1.0.0 L1 ServerUnix

CONFIGURATION MANAGEMENT

2.1.14 Ensure snmp services are not in useCIS Oracle Linux 10 v1.0.0 L1 ServerUnix

CONFIGURATION MANAGEMENT

2.1.15 Ensure telnet server services are not in useCIS Oracle Linux 10 v1.0.0 L1 ServerUnix

CONFIGURATION MANAGEMENT

2.1.18 Ensure web server services are not in useCIS Oracle Linux 10 v1.0.0 L1 ServerUnix

CONFIGURATION MANAGEMENT

2.1.22 Ensure only approved services are listening on a network interfaceCIS Oracle Linux 10 v1.0.0 L1 ServerUnix

CONFIGURATION MANAGEMENT

2.2.1 Ensure ftp client is not installedCIS Oracle Linux 10 v1.0.0 L1 ServerUnix

CONFIGURATION MANAGEMENT

2.2.3 Ensure telnet client is not installedCIS Oracle Linux 10 v1.0.0 L1 ServerUnix

CONFIGURATION MANAGEMENT

2.3.1 Ensure time synchronization is in useCIS Oracle Linux 10 v1.0.0 L1 ServerUnix

AUDIT AND ACCOUNTABILITY

2.4.1.2 Ensure access to /etc/crontab is configuredCIS Oracle Linux 10 v1.0.0 L1 ServerUnix

ACCESS CONTROL, MEDIA PROTECTION

2.4.1.4 Ensure access to /etc/cron.daily is configuredCIS Oracle Linux 10 v1.0.0 L1 ServerUnix

ACCESS CONTROL, MEDIA PROTECTION

2.4.1.5 Ensure access to /etc/cron.weekly is configuredCIS Oracle Linux 10 v1.0.0 L1 ServerUnix

ACCESS CONTROL, MEDIA PROTECTION

2.4.1.8 Ensure access to /etc/cron.d is configuredCIS Oracle Linux 10 v1.0.0 L1 ServerUnix

ACCESS CONTROL, MEDIA PROTECTION

3.1.2 Ensure wireless interfaces are not availableCIS Oracle Linux 10 v1.0.0 L1 ServerUnix

ACCESS CONTROL, CONFIGURATION MANAGEMENT

3.1.3 Ensure bluetooth services are not in useCIS Oracle Linux 10 v1.0.0 L1 ServerUnix

CONFIGURATION MANAGEMENT

3.2.2 Ensure can kernel module is not availableCIS Oracle Linux 10 v1.0.0 L1 ServerUnix

CONFIGURATION MANAGEMENT

3.3.1.5 Ensure net.ipv4.conf.default.send_redirects is configuredCIS Oracle Linux 10 v1.0.0 L1 ServerUnix

CONFIGURATION MANAGEMENT

3.3.1.7 Ensure net.ipv4.icmp_echo_ignore_broadcasts is configuredCIS Oracle Linux 10 v1.0.0 L1 ServerUnix

CONFIGURATION MANAGEMENT

3.3.1.8 Ensure net.ipv4.conf.all.accept_redirects is configuredCIS Oracle Linux 10 v1.0.0 L1 ServerUnix

CONFIGURATION MANAGEMENT

3.3.1.13 Ensure net.ipv4.conf.default.rp_filter is configuredCIS Oracle Linux 10 v1.0.0 L1 ServerUnix

CONFIGURATION MANAGEMENT

3.3.2.1 Ensure net.ipv6.conf.all.forwarding is configuredCIS Oracle Linux 10 v1.0.0 L1 ServerUnix

CONFIGURATION MANAGEMENT

3.3.2.5 Ensure net.ipv6.conf.all.accept_source_route is configuredCIS Oracle Linux 10 v1.0.0 L1 ServerUnix

CONFIGURATION MANAGEMENT

5.1.3 Ensure access to SSH public host key files is configuredCIS Oracle Linux 10 v1.0.0 L1 ServerUnix

ACCESS CONTROL, CONFIGURATION MANAGEMENT, MEDIA PROTECTION

5.1.17 Ensure sshd MaxStartups is configuredCIS Oracle Linux 10 v1.0.0 L1 ServerUnix

CONFIGURATION MANAGEMENT, IDENTIFICATION AND AUTHENTICATION

5.3.1.1 Ensure active authselect profile includes pam modulesCIS Oracle Linux 10 v1.0.0 L1 ServerUnix

SECURITY ASSESSMENT AND AUTHORIZATION, RISK ASSESSMENT

5.3.1.4 Ensure pam_pwhistory module is enabledCIS Oracle Linux 10 v1.0.0 L1 ServerUnix

IDENTIFICATION AND AUTHENTICATION

5.3.1.5 Ensure pam_unix module is enabledCIS Oracle Linux 10 v1.0.0 L1 ServerUnix

IDENTIFICATION AND AUTHENTICATION

5.3.2.1.2 Ensure password unlock time is configuredCIS Oracle Linux 10 v1.0.0 L1 ServerUnix

ACCESS CONTROL

5.3.2.2.1 Ensure password number of changed characters is configuredCIS Oracle Linux 10 v1.0.0 L1 ServerUnix

IDENTIFICATION AND AUTHENTICATION

5.3.2.4.1 Ensure pam_unix does not include nullokCIS Oracle Linux 10 v1.0.0 L1 ServerUnix

CONFIGURATION MANAGEMENT, IDENTIFICATION AND AUTHENTICATION

5.3.2.4.3 Ensure pam_unix includes a strong password hashing algorithmCIS Oracle Linux 10 v1.0.0 L1 ServerUnix

IDENTIFICATION AND AUTHENTICATION, SYSTEM AND COMMUNICATIONS PROTECTION

5.4.2.1 Ensure root is the only UID 0 accountCIS Oracle Linux 10 v1.0.0 L1 ServerUnix

ACCESS CONTROL, CONFIGURATION MANAGEMENT, MEDIA PROTECTION

5.4.3.3 Ensure default user umask is configuredCIS Oracle Linux 10 v1.0.0 L1 ServerUnix

ACCESS CONTROL, CONFIGURATION MANAGEMENT, MEDIA PROTECTION

6.2.2.2 Ensure journald ForwardToSyslog is disabledCIS Oracle Linux 10 v1.0.0 L1 ServerUnix

AUDIT AND ACCOUNTABILITY

7.1.12 Ensure no files or directories without an owner and a group existCIS Oracle Linux 10 v1.0.0 L1 ServerUnix

ACCESS CONTROL, CONFIGURATION MANAGEMENT, MEDIA PROTECTION

7.1.13 Ensure SUID and SGID files are reviewedCIS Oracle Linux 10 v1.0.0 L1 ServerUnix

ACCESS CONTROL, CONFIGURATION MANAGEMENT, IDENTIFICATION AND AUTHENTICATION, MEDIA PROTECTION

7.2.2 Ensure /etc/shadow password fields are not emptyCIS Oracle Linux 10 v1.0.0 L1 ServerUnix

CONFIGURATION MANAGEMENT, IDENTIFICATION AND AUTHENTICATION

7.2.5 Ensure no duplicate GIDs existCIS Oracle Linux 10 v1.0.0 L1 ServerUnix

CONFIGURATION MANAGEMENT, IDENTIFICATION AND AUTHENTICATION

7.2.7 Ensure no duplicate group names existCIS Oracle Linux 10 v1.0.0 L1 ServerUnix

CONFIGURATION MANAGEMENT, IDENTIFICATION AND AUTHENTICATION