Item Search

NameAudit NamePluginCategory
6.12 Set EEPROM Security Mode and Log Failed Access - SPARC only. Should *not* be 'security-mode=none'.CIS Solaris 10 L1 v5.2Unix

ACCESS CONTROL

PHTN-40-000226 - The Photon operating system must prevent IPv4 Internet Control Message Protocol (ICMP) secure redirect messages from being accepted.DISA VMware vSphere 8.0 vCenter Appliance Photon OS 4.0 STIG v2r2Unix

CONFIGURATION MANAGEMENT

SLES-15-010035 - The SUSE operating system must have the crypto-policies package installed.DISA SUSE Linux Enterprise Server 15 STIG v2r8Unix

SYSTEM AND COMMUNICATIONS PROTECTION

SLES-15-010080 - The SUSE operating system must display a banner before granting local or remote access to the system via a graphical user logon.DISA SUSE Linux Enterprise Server 15 STIG v2r8Unix

ACCESS CONTROL

SLES-15-010170 - The SUSE operating system, for PKI-based authentication, must validate certificates by constructing a certification path (which includes status information) to an accepted trust anchor.DISA SUSE Linux Enterprise Server 15 STIG v2r8Unix

IDENTIFICATION AND AUTHENTICATION

SLES-15-010230 - The SUSE operating system must not have duplicate User IDs (UIDs) for interactive users.DISA SUSE Linux Enterprise Server 15 STIG v2r8Unix

IDENTIFICATION AND AUTHENTICATION

SLES-15-010300 - The sticky bit must be set on all SUSE operating system world-writable directories.DISA SUSE Linux Enterprise Server 15 STIG v2r8Unix

SYSTEM AND COMMUNICATIONS PROTECTION

SLES-15-010320 - The SUSE operating system, for all network connections associated with SSH traffic, must immediately terminate at the end of the session or after 10 minutes of inactivity.DISA SUSE Linux Enterprise Server 15 STIG v2r8Unix

ACCESS CONTROL, SYSTEM AND COMMUNICATIONS PROTECTION

SLES-15-010340 - The SUSE operating system must generate error messages that provide information necessary for corrective actions without revealing information that could be exploited by adversaries.DISA SUSE Linux Enterprise Server 15 STIG v2r8Unix

SYSTEM AND INFORMATION INTEGRITY

SLES-15-010354 - The SUSE operating system library directories must be owned by root.DISA SUSE Linux Enterprise Server 15 STIG v2r8Unix

CONFIGURATION MANAGEMENT

SLES-15-010361 - The SUSE operating system must have system commands group-owned by root or a system account.DISA SUSE Linux Enterprise Server 15 STIG v2r8Unix

CONFIGURATION MANAGEMENT

SLES-15-010390 - SUSE operating system AppArmor tool must be configured to control whitelisted applications and user home directory access control.DISA SUSE Linux Enterprise Server 15 STIG v2r8Unix

ACCESS CONTROL, CONFIGURATION MANAGEMENT

SLES-15-010500 - The SUSE operating system must configure the Linux Pluggable Authentication Modules (PAM) to prohibit the use of cached offline authentications after one day.DISA SUSE Linux Enterprise Server 15 STIG v2r8Unix

IDENTIFICATION AND AUTHENTICATION

SLES-15-010540 - The SUSE operating system must implement kptr-restrict to prevent the leaking of internal kernel addresses.DISA SUSE Linux Enterprise Server 15 STIG v2r8Unix

SYSTEM AND INFORMATION INTEGRITY

SLES-15-020020 - The SUSE operating system must limit the number of concurrent sessions to 10 for all accounts and/or account types.DISA SUSE Linux Enterprise Server 15 STIG v2r8Unix

ACCESS CONTROL

SLES-15-020030 - The SUSE operating system must implement multifactor authentication for access to privileged accounts via pluggable authentication modules (PAM).DISA SUSE Linux Enterprise Server 15 STIG v2r8Unix

IDENTIFICATION AND AUTHENTICATION

SLES-15-020040 - The SUSE operating system must deny direct logons to the root account using remote access via SSH.DISA SUSE Linux Enterprise Server 15 STIG v2r8Unix

IDENTIFICATION AND AUTHENTICATION

SLES-15-020060 - The SUSE operating system must never automatically remove or disable emergency administrator accounts.DISA SUSE Linux Enterprise Server 15 STIG v2r8Unix

ACCESS CONTROL

SLES-15-020099 - The SUSE operating system must specify the default "include" directory for the /etc/sudoers file.DISA SUSE Linux Enterprise Server 15 STIG v2r8Unix

CONFIGURATION MANAGEMENT

SLES-15-020110 - All SUSE operating system local interactive user accounts, upon creation, must be assigned a home directory.DISA SUSE Linux Enterprise Server 15 STIG v2r8Unix

CONFIGURATION MANAGEMENT

SLES-15-020181 - The SUSE operating system must not have accounts configured with blank or null passwords.DISA SUSE Linux Enterprise Server 15 STIG v2r8Unix

CONFIGURATION MANAGEMENT

SLES-15-020300 - The SUSE operating system must not be configured to allow blank or null passwords.DISA SUSE Linux Enterprise Server 15 STIG v2r8Unix

CONFIGURATION MANAGEMENT

SLES-15-030030 - The SUSE operating system must generate audit records for all account creations, modifications, disabling, and termination events that affect /etc/security/opasswd.DISA SUSE Linux Enterprise Server 15 STIG v2r8Unix

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY

SLES-15-030130 - The SUSE operating system must generate audit records for all uses of the crontab command.DISA SUSE Linux Enterprise Server 15 STIG v2r8Unix

AUDIT AND ACCOUNTABILITY, MAINTENANCE

SLES-15-030140 - The SUSE operating system must audit all uses of the sudoers file and all files in the /etc/sudoers.d/ directory.DISA SUSE Linux Enterprise Server 15 STIG v2r8Unix

AUDIT AND ACCOUNTABILITY, MAINTENANCE

SLES-15-030290 - The SUSE operating system must generate audit records for all uses of the chmod, fchmod, and fchmodat system calls.DISA SUSE Linux Enterprise Server 15 STIG v2r8Unix

AUDIT AND ACCOUNTABILITY, MAINTENANCE

SLES-15-030340 - The SUSE operating system must generate audit records for all uses of the chfn command.DISA SUSE Linux Enterprise Server 15 STIG v2r8Unix

AUDIT AND ACCOUNTABILITY, MAINTENANCE

SLES-15-030390 - The SUSE operating system must generate audit records for all uses of the rmmod command.DISA SUSE Linux Enterprise Server 15 STIG v2r8Unix

AUDIT AND ACCOUNTABILITY, MAINTENANCE

SLES-15-030420 - The SUSE operating system must generate audit records for all uses of the chmod command.DISA SUSE Linux Enterprise Server 15 STIG v2r8Unix

AUDIT AND ACCOUNTABILITY, MAINTENANCE

SLES-15-030530 - The SUSE operating system must generate audit records for all uses of the init_module and finit_module system calls.DISA SUSE Linux Enterprise Server 15 STIG v2r8Unix

AUDIT AND ACCOUNTABILITY, MAINTENANCE

SLES-15-030560 - The SUSE operating system must generate audit records for all uses of the sudo command.DISA SUSE Linux Enterprise Server 15 STIG v2r8Unix

AUDIT AND ACCOUNTABILITY, MAINTENANCE

SLES-15-030640 - The SUSE operating system must generate audit records for all uses of the privileged functions.DISA SUSE Linux Enterprise Server 15 STIG v2r8Unix

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY, CONFIGURATION MANAGEMENT

SLES-15-030800 - Audispd must take appropriate action when the SUSE operating system audit storage is full.DISA SUSE Linux Enterprise Server 15 STIG v2r8Unix

AUDIT AND ACCOUNTABILITY

SLES-15-030810 - The SUSE operating system must use a separate file system for the system audit data path.DISA SUSE Linux Enterprise Server 15 STIG v2r8Unix

CONFIGURATION MANAGEMENT

SLES-15-040060 - The SUSE operating system must disable the x86 Ctrl-Alt-Delete key sequence.DISA SUSE Linux Enterprise Server 15 STIG v2r8Unix

CONFIGURATION MANAGEMENT

SLES-15-040090 - All SUSE operating system local interactive user home directories must have mode 0750 or less permissive.DISA SUSE Linux Enterprise Server 15 STIG v2r8Unix

CONFIGURATION MANAGEMENT

SLES-15-040100 - All SUSE operating system local interactive user home directories must be group-owned by the home directory owner's primary group.DISA SUSE Linux Enterprise Server 15 STIG v2r8Unix

CONFIGURATION MANAGEMENT

SLES-15-040120 - All SUSE operating system local interactive user initialization files executable search paths must contain only paths that resolve to the users home directory.DISA SUSE Linux Enterprise Server 15 STIG v2r8Unix

CONFIGURATION MANAGEMENT

SLES-15-040160 - SUSE operating system file systems that are being imported via Network File System (NFS) must be mounted to prevent files with the setuid and setgid bit set from being executed.DISA SUSE Linux Enterprise Server 15 STIG v2r8Unix

CONFIGURATION MANAGEMENT

SLES-15-040200 - A separate file system must be used for SUSE operating system user home directories (such as /home or an equivalent).DISA SUSE Linux Enterprise Server 15 STIG v2r8Unix

CONFIGURATION MANAGEMENT

SLES-15-040300 - The SUSE operating system must not forward Internet Protocol version 4 (IPv4) source-routed packets.DISA SUSE Linux Enterprise Server 15 STIG v2r8Unix

CONFIGURATION MANAGEMENT

SLES-15-040321 - The SUSE operating system must not forward Internet Protocol version 6 (IPv6) source-routed packets by default.DISA SUSE Linux Enterprise Server 15 STIG v2r8Unix

CONFIGURATION MANAGEMENT

SLES-15-040330 - The SUSE operating system must prevent Internet Protocol version 4 (IPv4) Internet Control Message Protocol (ICMP) redirect messages from being accepted.DISA SUSE Linux Enterprise Server 15 STIG v2r8Unix

CONFIGURATION MANAGEMENT

SLES-15-040350 - The SUSE operating system must not allow interfaces to accept Internet Protocol version 6 (IPv6) Internet Control Message Protocol (ICMP) redirect messages by default.DISA SUSE Linux Enterprise Server 15 STIG v2r8Unix

CONFIGURATION MANAGEMENT

SLES-15-040370 - The SUSE operating system must not send Internet Protocol version 4 (IPv4) Internet Control Message Protocol (ICMP) redirects.DISA SUSE Linux Enterprise Server 15 STIG v2r8Unix

CONFIGURATION MANAGEMENT

SLES-15-040390 - The SUSE operating system must not have network interfaces in promiscuous mode unless approved and documented.DISA SUSE Linux Enterprise Server 15 STIG v2r8Unix

CONFIGURATION MANAGEMENT

SLES-15-040400 - All SUSE operating system files and directories must have a valid owner.DISA SUSE Linux Enterprise Server 15 STIG v2r8Unix

SYSTEM AND INFORMATION INTEGRITY

SLES-15-040450 - The SUSE operating system SSH server must be configured to use only FIPS-validated key exchange algorithms.DISA SUSE Linux Enterprise Server 15 STIG v2r8Unix

ACCESS CONTROL

VCLD-70-000019 - VAMI must set the encoding for all text Multipurpose Internet Mail Extensions (MIME) types to UTF-8 - cgiDISA STIG VMware vSphere 7.0 VAMI v1r2Unix

SYSTEM AND INFORMATION INTEGRITY

VCLD-70-000019 - VAMI must set the encoding for all text Multipurpose Internet Mail Extensions (MIME) types to UTF-8 - rbDISA STIG VMware vSphere 7.0 VAMI v1r2Unix

SYSTEM AND INFORMATION INTEGRITY