Item Search

NameAudit NamePluginCategory
OL6-00-000001 - The system must use a separate file system for /tmp.DISA STIG Oracle Linux 6 v2r7Unix

CONFIGURATION MANAGEMENT

OL6-00-000004 - The system must use a separate file system for the system audit data path.DISA STIG Oracle Linux 6 v2r7Unix

CONFIGURATION MANAGEMENT

OL6-00-000033 - The /etc/shadow file must be owned by root.DISA STIG Oracle Linux 6 v2r7Unix

CONFIGURATION MANAGEMENT

OL6-00-000036 - The /etc/gshadow file must be owned by root.DISA STIG Oracle Linux 6 v2r7Unix

CONFIGURATION MANAGEMENT

OL6-00-000045 - Library files must have mode 0755 or less permissive - '/usr/lib'DISA STIG Oracle Linux 6 v2r7Unix

CONFIGURATION MANAGEMENT

OL6-00-000045 - Library files must have mode 0755 or less permissive - '/usr/lib64'DISA STIG Oracle Linux 6 v2r7Unix

CONFIGURATION MANAGEMENT

OL6-00-000054 - Users must be warned 7 days in advance of password expiration.DISA STIG Oracle Linux 6 v2r7Unix

CONFIGURATION MANAGEMENT

OL6-00-000056 - The system must require passwords to contain at least one numeric character - system-authDISA STIG Oracle Linux 6 v2r7Unix

IDENTIFICATION AND AUTHENTICATION

OL6-00-000057 - The system must require passwords to contain at least one uppercase alphabetic character - password-authDISA STIG Oracle Linux 6 v2r7Unix

IDENTIFICATION AND AUTHENTICATION

OL6-00-000057 - The system must require passwords to contain at least one uppercase alphabetic character - system-authDISA STIG Oracle Linux 6 v2r7Unix

IDENTIFICATION AND AUTHENTICATION

OL6-00-000060 - The system must require at least eight characters be changed between the old and new passwords during a password change - system-authDISA STIG Oracle Linux 6 v2r7Unix

IDENTIFICATION AND AUTHENTICATION

OL6-00-000061 - The system must disable accounts after three consecutive unsuccessful logon attempts - password-authDISA STIG Oracle Linux 6 v2r7Unix

ACCESS CONTROL

OL6-00-000067 - The system boot loader configuration file(s) must have mode 0600 or less permissive.DISA STIG Oracle Linux 6 v2r7Unix

CONFIGURATION MANAGEMENT

OL6-00-000068 - The system boot loader must require authentication.DISA STIG Oracle Linux 6 v2r7Unix

ACCESS CONTROL

OL6-00-000081 - The system must not send ICMPv4 redirects from any interface.DISA STIG Oracle Linux 6 v2r7Unix

CONFIGURATION MANAGEMENT

OL6-00-000090 - The system must not accept ICMPv4 secure redirect packets by default.DISA STIG Oracle Linux 6 v2r7Unix

CONFIGURATION MANAGEMENT

OL6-00-000091 - The system must ignore ICMPv4 redirect messages by default.DISA STIG Oracle Linux 6 v2r7Unix

CONFIGURATION MANAGEMENT

OL6-00-000093 - The system must ignore ICMPv4 bogus error responses.DISA STIG Oracle Linux 6 v2r7Unix

CONFIGURATION MANAGEMENT

OL6-00-000096 - The system must use a reverse-path filter for IPv4 network traffic when possible on all interfaces.DISA STIG Oracle Linux 6 v2r7Unix

CONFIGURATION MANAGEMENT

OL6-00-000103 - The system must employ a local IPv6 firewall.DISA STIG Oracle Linux 6 v2r7Unix

CONFIGURATION MANAGEMENT

OL6-00-000211 - The telnet daemon must not be running - CHKCONFIGDISA STIG Oracle Linux 6 v2r7Unix

CONFIGURATION MANAGEMENT

OL6-00-000211 - The telnet daemon must not be running - PROCESS_CHECKDISA STIG Oracle Linux 6 v2r7Unix

CONFIGURATION MANAGEMENT

OL6-00-000221 - The ypbind service must not be running - PROCESS_CHECKDISA STIG Oracle Linux 6 v2r7Unix

CONFIGURATION MANAGEMENT

OL6-00-000223 - The TFTP service must not be running - CHKCONFIGDISA STIG Oracle Linux 6 v2r7Unix

CONFIGURATION MANAGEMENT

OL6-00-000224 - The cron service must be running.DISA STIG Oracle Linux 6 v2r7Unix

CONFIGURATION MANAGEMENT

OL6-00-000231 - The SSH daemon must set a timeout count on idle sessions.DISA STIG Oracle Linux 6 v2r7Unix

MAINTENANCE

OL6-00-000237 - The system must not permit root logins using remote access programs such as ssh.DISA STIG Oracle Linux 6 v2r7Unix

IDENTIFICATION AND AUTHENTICATION

OL6-00-000247 - The system clock must be synchronized continuously, or at least daily - CHKCONFIGDISA STIG Oracle Linux 6 v2r7Unix

AUDIT AND ACCOUNTABILITY

OL6-00-000252 - If the system is using LDAP for authentication or account information, the system must use a TLS connection using FIPS 140-2 approved cryptographic algorithms.DISA STIG Oracle Linux 6 v2r7Unix

ACCESS CONTROL

OL6-00-000267 - The qpidd service must not be running - CHKCONFIGDISA STIG Oracle Linux 6 v2r7Unix

CONFIGURATION MANAGEMENT

OL6-00-000270 - Remote file systems must be mounted with the nosuid option.DISA STIG Oracle Linux 6 v2r7Unix

CONFIGURATION MANAGEMENT

OL6-00-000275 - The operating system must employ cryptographic mechanisms to protect information in storage.DISA STIG Oracle Linux 6 v2r7Unix

CONFIGURATION MANAGEMENT

OL6-00-000279 - The system package management tool must verify ownership on all files and directories associated with the audit package.DISA STIG Oracle Linux 6 v2r7Unix

AUDIT AND ACCOUNTABILITY

OL6-00-000282 - There must be no world-writable files on the system.DISA STIG Oracle Linux 6 v2r7Unix

CONFIGURATION MANAGEMENT

OL6-00-000285 - The Oracle Linux operating system must implement the Endpoint Security for Linux Threat Prevention tool - mcafeetp processDISA STIG Oracle Linux 6 v2r7Unix

SYSTEM AND INFORMATION INTEGRITY

OL6-00-000296 - All accounts on the system must have unique user or account names.DISA STIG Oracle Linux 6 v2r7Unix

IDENTIFICATION AND AUTHENTICATION

OL6-00-000305 - The operating system must provide a near real-time alert when any of the organization defined list of compromise or potential compromise indicators occurs.DISA STIG Oracle Linux 6 v2r7Unix

CONFIGURATION MANAGEMENT

OL6-00-000319 - The system must limit users to 10 simultaneous system logins, or a site-defined number, in accordance with operational requirements.DISA STIG Oracle Linux 6 v2r7Unix

ACCESS CONTROL

OL6-00-000331 - The Bluetooth service must be disabled - CHKCONFIGDISA STIG Oracle Linux 6 v2r7Unix

CONFIGURATION MANAGEMENT

OL6-00-000338 - The TFTP daemon must operate in secure mode which provides access only to a single directory on the host file system.DISA STIG Oracle Linux 6 v2r7Unix

CONFIGURATION MANAGEMENT

OL6-00-000339 - The FTP daemon must be configured for logging or verbose mode - 'xferlog_enable'DISA STIG Oracle Linux 6 v2r7Unix

AUDIT AND ACCOUNTABILITY

OL6-00-000339 - The FTP daemon must be configured for logging or verbose mode - 'xferlog_std_format'DISA STIG Oracle Linux 6 v2r7Unix

AUDIT AND ACCOUNTABILITY

OL6-00-000347 - There must be no .netrc files on the system.DISA STIG Oracle Linux 6 v2r7Unix

IDENTIFICATION AND AUTHENTICATION

OL6-00-000356 - The system must require administrator action to unlock an account locked by excessive failed login attempts - password-authDISA STIG Oracle Linux 6 v2r7Unix

ACCESS CONTROL

OL6-00-000384 - Audit log files must be owned by root.DISA STIG Oracle Linux 6 v2r7Unix

AUDIT AND ACCOUNTABILITY

OL6-00-000508 - The system must allow locking of graphical desktop sessions.DISA STIG Oracle Linux 6 v2r7Unix

ACCESS CONTROL

OL6-00-000518 - The system package management tool must verify permissions on all files and directories associated with packages.DISA STIG Oracle Linux 6 v2r7Unix

CONFIGURATION MANAGEMENT

OL6-00-000525 - Auditing must be enabled at boot by setting a kernel parameter.DISA STIG Oracle Linux 6 v2r7Unix

AUDIT AND ACCOUNTABILITY

OL6-00-000532 - The Oracle Linux operating system must mount /dev/shm with the noexec option.DISA STIG Oracle Linux 6 v2r7Unix

CONFIGURATION MANAGEMENT

OL6-00-000535 - The Oracle Linux operating system must restrict privilege elevation to authorized personnel - sudoers.dDISA STIG Oracle Linux 6 v2r7Unix

CONFIGURATION MANAGEMENT