Item Search

NameAudit NamePluginCategory
1.1.1.4 Ensure hfsplus kernel module is not availableCIS Oracle Linux 7 v4.0.0 L1 ServerUnix

CONFIGURATION MANAGEMENT

1.1.1.8 Ensure usb-storage kernel module is not availableCIS Oracle Linux 7 v4.0.0 L1 ServerUnix

MEDIA PROTECTION, SYSTEM AND INFORMATION INTEGRITY

1.1.2.1.2 Ensure nodev option set on /tmp partitionCIS Oracle Linux 7 v4.0.0 L1 ServerUnix

CONFIGURATION MANAGEMENT

1.1.2.2.1 Ensure /dev/shm is a separate partitionCIS Oracle Linux 7 v4.0.0 L1 ServerUnix

CONFIGURATION MANAGEMENT

1.1.2.3.2 Ensure nodev option set on /home partitionCIS Linux Mint 22 v1.0.0 L1 WorkstationUnix

ACCESS CONTROL, MEDIA PROTECTION

1.1.2.4.3 Ensure nosuid option set on /var partitionCIS Oracle Linux 7 v4.0.0 L1 ServerUnix

ACCESS CONTROL, MEDIA PROTECTION

1.1.2.5.3 Ensure nosuid option set on /var/tmp partitionCIS Linux Mint 22 v1.0.0 L1 WorkstationUnix

ACCESS CONTROL, CONFIGURATION MANAGEMENT, MEDIA PROTECTION

1.1.2.6.2 Ensure nodev option set on /var/log partitionCIS Linux Mint 22 v1.0.0 L1 WorkstationUnix

ACCESS CONTROL, CONFIGURATION MANAGEMENT, MEDIA PROTECTION

1.2.2.1 Ensure updates, patches, and additional security software are installedCIS Linux Mint 22 v1.0.0 L1 WorkstationUnix

RISK ASSESSMENT, SYSTEM AND INFORMATION INTEGRITY

1.6.1 Ensure /etc/motd is configuredCIS Linux Mint 22 v1.0.0 L1 WorkstationUnix

CONFIGURATION MANAGEMENT

2.1.9 Ensure network file system services are not in useCIS Linux Mint 22 v1.0.0 L1 WorkstationUnix

CONFIGURATION MANAGEMENT

2.1.16 Ensure snmp services are not in useCIS Linux Mint 22 v1.0.0 L1 WorkstationUnix

CONFIGURATION MANAGEMENT

2.2.2 Ensure rsh client is not installedCIS Linux Mint 22 v1.0.0 L1 WorkstationUnix

CONFIGURATION MANAGEMENT

2.2.3 Ensure talk client is not installedCIS Linux Mint 22 v1.0.0 L1 WorkstationUnix

CONFIGURATION MANAGEMENT

2.2.5 Ensure ldap client is not installedCIS Linux Mint 22 v1.0.0 L1 WorkstationUnix

CONFIGURATION MANAGEMENT

2.4.1.8 Ensure access to /etc/cron.d is configuredCIS Linux Mint 22 v1.0.0 L1 WorkstationUnix

ACCESS CONTROL, MEDIA PROTECTION

2.4.2.1 Ensure access to at is configuredCIS Linux Mint 22 v1.0.0 L1 WorkstationUnix

ACCESS CONTROL, MEDIA PROTECTION

4.1.2 Ensure ufw service is enabledCIS Linux Mint 22 v1.0.0 L1 WorkstationUnix

SECURITY ASSESSMENT AND AUTHORIZATION, SYSTEM AND COMMUNICATIONS PROTECTION

4.1.3 Ensure ufw default incoming is configuredCIS Linux Mint 22 v1.0.0 L1 WorkstationUnix

SECURITY ASSESSMENT AND AUTHORIZATION, SYSTEM AND COMMUNICATIONS PROTECTION

5.1.3 Ensure access to SSH public host key files is configuredCIS Debian Linux 12 v2.0.0 L1 WorkstationUnix

ACCESS CONTROL, MEDIA PROTECTION

5.1.5 Ensure re-authentication for privilege escalation is not disabled globallyCIS Linux Mint 22 v1.0.0 L1 WorkstationUnix

ACCESS CONTROL

5.1.6 Ensure sshd Ciphers are configuredCIS Debian Linux 12 v2.0.0 L1 WorkstationUnix

ACCESS CONTROL, IDENTIFICATION AND AUTHENTICATION, SYSTEM AND COMMUNICATIONS PROTECTION

5.1.6 Ensure sudo authentication timeout is configuredCIS Linux Mint 22 v1.0.0 L1 WorkstationUnix

ACCESS CONTROL

5.1.22 Ensure sshd UsePAM is enabledCIS Debian Linux 12 v2.0.0 L1 WorkstationUnix

CONFIGURATION MANAGEMENT, IDENTIFICATION AND AUTHENTICATION

5.2.1 Ensure sudo is installedCIS Debian Linux 12 v2.0.0 L1 WorkstationUnix

ACCESS CONTROL

5.2.3.2.2 Ensure minimum password length is configuredCIS Linux Mint 22 v1.0.0 L1 WorkstationUnix

IDENTIFICATION AND AUTHENTICATION

5.2.3.2.4 Ensure password same consecutive characters is configuredCIS Linux Mint 22 v1.0.0 L1 WorkstationUnix

IDENTIFICATION AND AUTHENTICATION

5.2.3.2.5 Ensure password maximum sequential characters is configuredCIS Linux Mint 22 v1.0.0 L1 WorkstationUnix

IDENTIFICATION AND AUTHENTICATION

5.2.3.3.2 Ensure password history is enforced for the root userCIS Linux Mint 22 v1.0.0 L1 WorkstationUnix

IDENTIFICATION AND AUTHENTICATION

5.3.2.4 Ensure pam_pwhistory module is enabledCIS Debian Linux 12 v2.0.0 L1 WorkstationUnix

IDENTIFICATION AND AUTHENTICATION

5.3.2.7 Ensure system accounts do not have a valid login shellCIS Linux Mint 22 v1.0.0 L1 WorkstationUnix

ACCESS CONTROL, MEDIA PROTECTION

5.3.3.2.1 Ensure password number of changed characters is configuredCIS Debian Linux 12 v2.0.0 L1 WorkstationUnix

IDENTIFICATION AND AUTHENTICATION

5.3.3.4.1 Ensure pam_unix does not include nullokCIS Debian Linux 12 v2.0.0 L1 WorkstationUnix

IDENTIFICATION AND AUTHENTICATION

5.4.2.3 Ensure group root is the only GID 0 groupCIS Debian Linux 12 v2.0.0 L1 WorkstationUnix

ACCESS CONTROL, CONFIGURATION MANAGEMENT, IDENTIFICATION AND AUTHENTICATION, MEDIA PROTECTION

6.1.1.2 Ensure journald log file access is configuredCIS Linux Mint 22 v1.0.0 L1 WorkstationUnix

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY, MEDIA PROTECTION, SYSTEM AND INFORMATION INTEGRITY

6.1.2.2 Ensure journald ForwardToSyslog is disabledCIS Linux Mint 22 v1.0.0 L1 WorkstationUnix

AUDIT AND ACCOUNTABILITY

6.1.2.2 Ensure rsyslog service is enabled and activeCIS Debian Linux 12 v2.0.0 L1 WorkstationUnix

CONFIGURATION MANAGEMENT

6.3.2 Ensure filesystem integrity is regularly checkedCIS Debian Linux 12 v2.0.0 L1 WorkstationUnix

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY

7.1.6 Ensure access to /etc/shadow- is configuredCIS Linux Mint 22 v1.0.0 L1 WorkstationUnix

ACCESS CONTROL, MEDIA PROTECTION

7.1.8 Ensure access to /etc/gshadow- is configuredCIS Linux Mint 22 v1.0.0 L1 WorkstationUnix

ACCESS CONTROL, MEDIA PROTECTION

7.1.9 Ensure access to /etc/shells is configuredCIS Debian Linux 12 v2.0.0 L1 WorkstationUnix

ACCESS CONTROL, MEDIA PROTECTION

7.1.9 Ensure access to /etc/shells is configuredCIS Linux Mint 22 v1.0.0 L1 WorkstationUnix

ACCESS CONTROL, MEDIA PROTECTION

7.1.11 Ensure world writable files and directories are securedCIS Linux Mint 22 v1.0.0 L1 WorkstationUnix

ACCESS CONTROL, MEDIA PROTECTION

7.1.12 Ensure no files or directories without an owner and a group existCIS Linux Mint 22 v1.0.0 L1 WorkstationUnix

ACCESS CONTROL, MEDIA PROTECTION

7.1.13 Ensure SUID and SGID files are reviewedCIS Linux Mint 22 v1.0.0 L1 WorkstationUnix

ACCESS CONTROL, CONFIGURATION MANAGEMENT, IDENTIFICATION AND AUTHENTICATION, MEDIA PROTECTION

7.2.1 Ensure accounts in /etc/passwd use shadowed passwordsCIS Debian Linux 12 v2.0.0 L1 WorkstationUnix

IDENTIFICATION AND AUTHENTICATION, SYSTEM AND COMMUNICATIONS PROTECTION

7.2.2 Ensure /etc/shadow password fields are not emptyCIS Linux Mint 22 v1.0.0 L1 WorkstationUnix

CONFIGURATION MANAGEMENT, IDENTIFICATION AND AUTHENTICATION

7.2.4 Ensure shadow group is emptyCIS Debian Linux 12 v2.0.0 L1 WorkstationUnix

ACCESS CONTROL, IDENTIFICATION AND AUTHENTICATION, MEDIA PROTECTION

7.2.7 Ensure no duplicate user names existCIS Linux Mint 22 v1.0.0 L1 WorkstationUnix

CONFIGURATION MANAGEMENT, IDENTIFICATION AND AUTHENTICATION

7.2.9 Ensure local interactive user home directories are configuredCIS Debian Linux 12 v2.0.0 L1 WorkstationUnix

ACCESS CONTROL, CONFIGURATION MANAGEMENT, MEDIA PROTECTION