Item Search

NameAudit NamePluginCategory
1.1.1.10 Ensure usb-storage kernel module is not availableCIS Oracle Linux 9 v3.0.0 L1 ServerUnix

IDENTIFICATION AND AUTHENTICATION

1.1.2.2.4 Ensure noexec option set on /dev/shm partitionCIS Oracle Linux 9 v3.0.0 L1 ServerUnix

ACCESS CONTROL, CONFIGURATION MANAGEMENT, MEDIA PROTECTION

1.1.2.6.2 Ensure nodev option set on /var/log partitionCIS Oracle Linux 9 v3.0.0 L1 ServerUnix

ACCESS CONTROL, CONFIGURATION MANAGEMENT, MEDIA PROTECTION

1.5.5 Ensure kernel.kptr_restrict is configuredCIS Oracle Linux 9 v3.0.0 L1 ServerUnix

CONFIGURATION MANAGEMENT, SYSTEM AND INFORMATION INTEGRITY

1.5.9 Ensure systemd-coredump ProcessSizeMax is configuredCIS Oracle Linux 9 v3.0.0 L1 ServerUnix

CONFIGURATION MANAGEMENT

1.6.3 Ensure system wide crypto policy macs are configuredCIS Oracle Linux 9 v3.0.0 L1 ServerUnix

CONFIGURATION MANAGEMENT, SYSTEM AND COMMUNICATIONS PROTECTION

1.6.4 Ensure system wide crypto policy disables cbc for sshCIS Oracle Linux 9 v3.0.0 L1 ServerUnix

ACCESS CONTROL, IDENTIFICATION AND AUTHENTICATION, SYSTEM AND COMMUNICATIONS PROTECTION

1.6.5 Ensure system wide crypto policy disables chacha20-poly1305 for sshCIS Oracle Linux 9 v3.0.0 L1 ServerUnix

ACCESS CONTROL, IDENTIFICATION AND AUTHENTICATION, SYSTEM AND COMMUNICATIONS PROTECTION

1.45 O19C-00-011200CIS Oracle Database 19c STIG v1.1.0 CAT II UnixUnix

CONFIGURATION MANAGEMENT

1.320 ALMA-09-041490CIS Cloud Linux AlmaLinux OS 9 STIG v1.0.0 CAT IIUnix

SYSTEM AND COMMUNICATIONS PROTECTION

2.1.4 Ensure dhcp server services are not in useCIS Oracle Linux 9 v3.0.0 L1 ServerUnix

CONFIGURATION MANAGEMENT

2.1.17 Ensure web proxy server services are not in useCIS Oracle Linux 9 v3.0.0 L1 ServerUnix

CONFIGURATION MANAGEMENT

2.4.1.2 Ensure access to /etc/crontab is configuredCIS Oracle Linux 9 v3.0.0 L1 ServerUnix

ACCESS CONTROL, MEDIA PROTECTION

5.1.2 Ensure access to /etc/ssh/sshd_config.d/ directory is configuredCIS Oracle Linux 9 v3.0.0 L1 ServerUnix

ACCESS CONTROL, MEDIA PROTECTION

5.1.7 Ensure sshd MACs are configuredCIS Oracle Linux 9 v3.0.0 L1 ServerUnix

CONFIGURATION MANAGEMENT, SYSTEM AND COMMUNICATIONS PROTECTION

5.1.8 Ensure sshd access is configuredCIS Oracle Linux 9 v3.0.0 L1 ServerUnix

ACCESS CONTROL, MEDIA PROTECTION

5.1.9 Ensure sshd Banner is configuredCIS Oracle Linux 9 v3.0.0 L1 ServerUnix

CONFIGURATION MANAGEMENT, IDENTIFICATION AND AUTHENTICATION

5.2.4 Ensure sudo commands use ptyCIS Oracle Linux 9 v3.0.0 L1 ServerUnix

ACCESS CONTROL

5.2.5 Ensure sudo log file existsCIS Oracle Linux 9 v3.0.0 L1 ServerUnix

AUDIT AND ACCOUNTABILITY

5.2.7 Ensure re-authentication for privilege escalation is not disabled globallyCIS Oracle Linux 9 v3.0.0 L1 ServerUnix

ACCESS CONTROL

5.2.11 Ensure sudo timestamp_type is configuredCIS Oracle Linux 9 v3.0.0 L1 ServerUnix

ACCESS CONTROL

5.3.1.2 Ensure latest version of authselect is installedCIS Oracle Linux 9 v3.0.0 L1 ServerUnix

SYSTEM AND INFORMATION INTEGRITY

5.3.2.3 Ensure pam_pwquality module is enabledCIS Oracle Linux 9 v3.0.0 L1 ServerUnix

CONFIGURATION MANAGEMENT, IDENTIFICATION AND AUTHENTICATION

5.3.3.2.4 Ensure password same consecutive characters is configuredCIS Oracle Linux 9 v3.0.0 L1 ServerUnix

IDENTIFICATION AND AUTHENTICATION

5.3.3.4.2 Ensure pam_unix does not include rememberCIS Oracle Linux 9 v3.0.0 L1 ServerUnix

IDENTIFICATION AND AUTHENTICATION

5.3.3.4.4 Ensure pam_unix includes use_authtokCIS Oracle Linux 9 v3.0.0 L1 ServerUnix

IDENTIFICATION AND AUTHENTICATION

5.4.1.1 Ensure password expiration is configuredCIS Oracle Linux 9 v3.0.0 L1 ServerUnix

CONFIGURATION MANAGEMENT, IDENTIFICATION AND AUTHENTICATION

5.4.2.8 Ensure accounts without a valid login shell are lockedCIS Oracle Linux 9 v3.0.0 L1 ServerUnix

ACCESS CONTROL, IDENTIFICATION AND AUTHENTICATION, MEDIA PROTECTION

5.4.3.4 Ensure default user umask is configuredCIS Oracle Linux 9 v3.0.0 L1 ServerUnix

ACCESS CONTROL, CONFIGURATION MANAGEMENT, MEDIA PROTECTION

6.1.1.2 Ensure systemd-journal-remote is not in useCIS Oracle Linux 9 v3.0.0 L1 ServerUnix

AUDIT AND ACCOUNTABILITY, CONFIGURATION MANAGEMENT

6.1.2.1 Ensure rsyslog is installedCIS Oracle Linux 9 v3.0.0 L1 ServerUnix

AUDIT AND ACCOUNTABILITY, CONFIGURATION MANAGEMENT

6.1.2.3 Ensure rsyslog log file creation mode is configuredCIS Oracle Linux 9 v3.0.0 L1 ServerUnix

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY, MEDIA PROTECTION

6.1.2.5 Ensure access to the /etc/rsyslog.d directory is configuredCIS Oracle Linux 9 v3.0.0 L1 ServerUnix

ACCESS CONTROL, MEDIA PROTECTION

6.1.3.1 Ensure access to all logfiles has been configuredCIS Oracle Linux 9 v3.0.0 L1 ServerUnix

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY

6.3.1 Ensure AIDE is installedCIS Oracle Linux 9 v3.0.0 L1 ServerUnix

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY, SYSTEM AND INFORMATION INTEGRITY

7.1.5 Ensure access to /etc/shadow is configuredCIS Oracle Linux 9 v3.0.0 L1 ServerUnix

ACCESS CONTROL, MEDIA PROTECTION

7.1.11 Ensure world writable files and directories are securedCIS Oracle Linux 9 v3.0.0 L1 ServerUnix

ACCESS CONTROL, MEDIA PROTECTION, SYSTEM AND COMMUNICATIONS PROTECTION

7.2.1 Ensure accounts in /etc/passwd use shadowed passwordsCIS Oracle Linux 9 v3.0.0 L1 ServerUnix

IDENTIFICATION AND AUTHENTICATION, SYSTEM AND COMMUNICATIONS PROTECTION

7.2.3 Ensure all groups in /etc/passwd exist in /etc/groupCIS Oracle Linux 9 v3.0.0 L1 ServerUnix

ACCESS CONTROL

7.2.4 Ensure no duplicate UIDs existCIS Oracle Linux 9 v3.0.0 L1 ServerUnix

IDENTIFICATION AND AUTHENTICATION

O19C-00-001900 - Oracle Database must allow designated organizational personnel to select which auditable events are to be audited by the database.DISA Oracle Database 19c STIG v1r3 OracleDBOracleDB

AUDIT AND ACCOUNTABILITY

O19C-00-011200 - Network access to Oracle Database must be restricted to authorized personnel.DISA Oracle Database 19c STIG v1r5 UnixUnix

CONFIGURATION MANAGEMENT

OL07-00-020022 - The Oracle Linux operating system must not allow privileged accounts to utilize SSH.DISA Oracle Linux 7 STIG v3r5Unix

ACCESS CONTROL

OL07-00-020110 - The Oracle Linux operating system must disable the file system automounter unless required.DISA Oracle Linux 7 STIG v3r5Unix

IDENTIFICATION AND AUTHENTICATION

OL07-00-021710 - The Oracle Linux operating system must not have the telnet-server package installed.DISA Oracle Linux 7 STIG v3r5Unix

CONFIGURATION MANAGEMENT

OL07-00-030560 - The Oracle Linux operating system must audit all uses of the semanage command.DISA Oracle Linux 7 STIG v3r5Unix

AUDIT AND ACCOUNTABILITY, MAINTENANCE

OL07-00-030580 - The Oracle Linux operating system must audit all uses of the chcon command.DISA Oracle Linux 7 STIG v3r5Unix

MAINTENANCE

OL07-00-030640 - The Oracle Linux operating system must audit all uses of the unix_chkpwd command.DISA Oracle Linux 7 STIG v3r5Unix

AUDIT AND ACCOUNTABILITY

OL07-00-030710 - The Oracle Linux operating system must audit all uses of the newgrp command.DISA Oracle Linux 7 STIG v3r5Unix

AUDIT AND ACCOUNTABILITY

OL07-00-030800 - The Oracle Linux operating system must audit all uses of the crontab command.DISA Oracle Linux 7 STIG v3r5Unix

AUDIT AND ACCOUNTABILITY