Item Search

NameAudit NamePluginCategory
1.1.1.1 Ensure cramfs kernel module is not availableCIS Oracle Linux 9 v3.0.0 L1 ServerUnix

CONFIGURATION MANAGEMENT

1.1.1.2 Ensure freevxfs kernel module is not availableCIS Oracle Linux 9 v3.0.0 L1 ServerUnix

CONFIGURATION MANAGEMENT

1.1.1.3 Ensure hfs kernel module is not availableCIS Oracle Linux 9 v3.0.0 L1 ServerUnix

CONFIGURATION MANAGEMENT

1.1.2.2.1 Ensure /dev/shm is tmpfs or a separate partitionCIS Oracle Linux 9 v3.0.0 L1 ServerUnix

ACCESS CONTROL, CONFIGURATION MANAGEMENT, MEDIA PROTECTION

1.1.2.2.2 Ensure nodev option set on /dev/shm partitionCIS Oracle Linux 9 v3.0.0 L1 ServerUnix

ACCESS CONTROL, CONFIGURATION MANAGEMENT, MEDIA PROTECTION

1.1.2.3.3 Ensure nosuid option set on /home partitionCIS Oracle Linux 9 v3.0.0 L1 ServerUnix

ACCESS CONTROL, MEDIA PROTECTION

1.1.2.4.2 Ensure nodev option set on /var partitionCIS Oracle Linux 9 v3.0.0 L1 ServerUnix

ACCESS CONTROL, MEDIA PROTECTION

1.1.2.5.2 Ensure nodev option set on /var/tmp partitionCIS Oracle Linux 9 v3.0.0 L1 ServerUnix

ACCESS CONTROL, CONFIGURATION MANAGEMENT, MEDIA PROTECTION

1.1.2.6.3 Ensure nosuid option set on /var/log partitionCIS Oracle Linux 9 v3.0.0 L1 ServerUnix

ACCESS CONTROL, CONFIGURATION MANAGEMENT, MEDIA PROTECTION

1.3.1.7 Ensure the MCS Translation Service (mcstrans) is not installedCIS Oracle Linux 9 v3.0.0 L1 ServerUnix

ACCESS CONTROL, CONFIGURATION MANAGEMENT, MEDIA PROTECTION

1.3.1.8 Ensure SETroubleshoot is not installedCIS Oracle Linux 9 v3.0.0 L1 ServerUnix

ACCESS CONTROL, CONFIGURATION MANAGEMENT, MEDIA PROTECTION

1.4.2 Ensure access to bootloader config is configuredCIS Oracle Linux 9 v3.0.0 L1 ServerUnix

ACCESS CONTROL, CONFIGURATION MANAGEMENT, MEDIA PROTECTION

1.5.3 Ensure fs.suid_dumpable is configuredCIS Oracle Linux 9 v3.0.0 L1 ServerUnix

ACCESS CONTROL

1.5.4 Ensure kernel.dmesg_restrict is configuredCIS Oracle Linux 9 v3.0.0 L1 ServerUnix

SYSTEM AND COMMUNICATIONS PROTECTION

1.5.10 Ensure systemd-coredump Storage is configuredCIS Oracle Linux 9 v3.0.0 L1 ServerUnix

CONFIGURATION MANAGEMENT

1.7.1 Ensure /etc/motd is configuredCIS Oracle Linux 9 v3.0.0 L1 ServerUnix

CONFIGURATION MANAGEMENT

1.7.3 Ensure /etc/issue.net is configuredCIS Oracle Linux 9 v3.0.0 L1 ServerUnix

CONFIGURATION MANAGEMENT

1.7.4 Ensure access to /etc/motd is configuredCIS Oracle Linux 9 v3.0.0 L1 ServerUnix

ACCESS CONTROL, MEDIA PROTECTION

1.7.5 Ensure access to /etc/issue is configuredCIS Oracle Linux 9 v3.0.0 L1 ServerUnix

ACCESS CONTROL, MEDIA PROTECTION

1.8.1 Ensure GDM login banner is configuredCIS Oracle Linux 9 v3.0.0 L1 ServerUnix

ACCESS CONTROL

1.9 O19C-00-001900CIS Oracle Database 19c STIG v1.1.0 CAT II OracleDBOracleDB

AUDIT AND ACCOUNTABILITY

2.1.19 Ensure mail transfer agents are configured for local-only modeCIS Oracle Linux 9 v3.0.0 L1 ServerUnix

CONFIGURATION MANAGEMENT

2.1.23 Ensure only approved services are listening on a network interfaceCIS Oracle Linux 9 v3.0.0 L1 ServerUnix

CONFIGURATION MANAGEMENT

2.2.3 Ensure telnet client is not installedCIS Oracle Linux 9 v3.0.0 L1 ServerUnix

CONFIGURATION MANAGEMENT

3.3.1.4 Ensure net.ipv4.conf.all.send_redirects is configuredCIS Oracle Linux 9 v3.0.0 L1 ServerUnix

CONFIGURATION MANAGEMENT

3.3.1.6 Ensure net.ipv4.icmp_ignore_bogus_error_responses is configuredCIS Oracle Linux 9 v3.0.0 L1 ServerUnix

CONFIGURATION MANAGEMENT

3.3.1.17 Ensure net.ipv4.conf.default.log_martians is configuredCIS Oracle Linux 9 v3.0.0 L1 ServerUnix

AUDIT AND ACCOUNTABILITY, CONFIGURATION MANAGEMENT

3.3.1.19 Ensure net.ipv4.conf.all.route_localnet is configuredCIS Oracle Linux 9 v3.0.0 L1 ServerUnix

CONFIGURATION MANAGEMENT, SYSTEM AND COMMUNICATIONS PROTECTION

3.3.2.8 Ensure net.ipv6.conf.default.accept_ra is configuredCIS Oracle Linux 9 v3.0.0 L1 ServerUnix

CONFIGURATION MANAGEMENT

4.1.1 Ensure firewalld is installedCIS Oracle Linux 9 v3.0.0 L1 ServerUnix

SECURITY ASSESSMENT AND AUTHORIZATION, SYSTEM AND COMMUNICATIONS PROTECTION

4.1.9 Ensure conflicting firewall utilities are not in use with firewalldCIS Oracle Linux 9 v3.0.0 L1 ServerUnix

SECURITY ASSESSMENT AND AUTHORIZATION, SYSTEM AND COMMUNICATIONS PROTECTION

5.1.4 Ensure access to SSH public host key files is configuredCIS Oracle Linux 9 v3.0.0 L1 ServerUnix

ACCESS CONTROL, CONFIGURATION MANAGEMENT, MEDIA PROTECTION

5.1.18 Ensure sshd MaxStartups is configuredCIS Oracle Linux 9 v3.0.0 L1 ServerUnix

CONFIGURATION MANAGEMENT, IDENTIFICATION AND AUTHENTICATION

5.2.3 Ensure access on the /etc/sudoers.d directory is configuredCIS Oracle Linux 9 v3.0.0 L1 ServerUnix

ACCESS CONTROL, MEDIA PROTECTION

5.2.10 Ensure sudo timestamp_timeout is configuredCIS Oracle Linux 9 v3.0.0 L1 ServerUnix

ACCESS CONTROL, IDENTIFICATION AND AUTHENTICATION

5.3.2.1 Ensure PAM is managed by an active authselect profileCIS Oracle Linux 9 v3.0.0 L1 ServerUnix

IDENTIFICATION AND AUTHENTICATION

5.3.3.1.1 Ensure password failed attempts lockout is configuredCIS Oracle Linux 9 v3.0.0 L1 ServerUnix

ACCESS CONTROL, IDENTIFICATION AND AUTHENTICATION

5.3.3.2.1 Ensure password number of changed characters is configuredCIS Oracle Linux 9 v3.0.0 L1 ServerUnix

IDENTIFICATION AND AUTHENTICATION

5.3.3.2.6 Ensure password dictionary check is enabledCIS Oracle Linux 9 v3.0.0 L1 ServerUnix

IDENTIFICATION AND AUTHENTICATION

5.3.3.3.2 Ensure password history is enforced for the root userCIS Oracle Linux 9 v3.0.0 L1 ServerUnix

IDENTIFICATION AND AUTHENTICATION

5.4.2.6 Ensure root user umask is configuredCIS Oracle Linux 9 v3.0.0 L1 ServerUnix

ACCESS CONTROL, MEDIA PROTECTION

6.1.1.3 Ensure journald is configured to send logs to rsyslogCIS Oracle Linux 9 v3.0.0 L1 ServerUnix

AUDIT AND ACCOUNTABILITY

6.1.2.2 Ensure rsyslog service is enabled and activeCIS Oracle Linux 9 v3.0.0 L1 ServerUnix

AUDIT AND ACCOUNTABILITY

7.1.7 Ensure access to /etc/gshadow is configuredCIS Oracle Linux 9 v3.0.0 L1 ServerUnix

ACCESS CONTROL, MEDIA PROTECTION

7.2.5 Ensure no duplicate GIDs existCIS Oracle Linux 9 v3.0.0 L1 ServerUnix

ACCESS CONTROL

7.2.8 Ensure local interactive user home directories are configuredCIS Oracle Linux 9 v3.0.0 L1 ServerUnix

ACCESS CONTROL, MEDIA PROTECTION

O19C-00-009900 - The Oracle Listener must be configured to require administration authentication.DISA Oracle Database 19c STIG v1r5 WindowsWindows

CONFIGURATION MANAGEMENT

O19C-00-009900 - The Oracle Listener must be configured to require administration authentication.DISA Oracle Database 19c STIG v1r3 WindowsWindows

CONFIGURATION MANAGEMENT

O19C-00-011200 - Network access to Oracle Database must be restricted to authorized personnel.DISA Oracle Database 19c STIG v1r3 WindowsWindows

CONFIGURATION MANAGEMENT

O121-C2-002700 - The DBMS must enforce approved authorizations for logical access to the system in accordance with applicable policy.DISA Oracle Database 12c STIG v3r5 OracleDBOracleDB

ACCESS CONTROL