Item Search

NameAudit NamePluginCategory
1.1.1.4 Ensure mounting of hfs filesystems is disabled - modprobeCIS Debian Family Workstation L1 v1.0.0Unix

CONFIGURATION MANAGEMENT

1.1.1.5 Ensure mounting of hfsplus filesystems is disabled - modprobeCIS Debian Family Workstation L1 v1.0.0Unix

CONFIGURATION MANAGEMENT

1.1.1.6 Ensure mounting of squashfs filesystems is disabled - modprobeCIS CentOS 6 Server L1 v3.0.0Unix

CONFIGURATION MANAGEMENT

1.1.2 Ensure /tmp is configuredCIS CentOS 6 Workstation L2 v3.0.0Unix

CONFIGURATION MANAGEMENT

1.1.4 Ensure nosuid option set on /tmp partitionCIS CentOS 6 Server L1 v3.0.0Unix

CONFIGURATION MANAGEMENT

1.1.9 Ensure nosuid option set on /var/tmp partitionCIS CentOS 6 Server L1 v3.0.0Unix

CONFIGURATION MANAGEMENT

1.1.12 Ensure separate partition exists for /var/log/auditCIS Aliyun Linux 2 L2 v1.0.0Unix

AUDIT AND ACCOUNTABILITY

1.5.1 Ensure permissions on bootloader config are configuredCIS Debian Family Workstation L1 v1.0.0Unix

CONFIGURATION MANAGEMENT

1.7.1.2 Ensure local login warning banner is configured properly - msrvCIS Aliyun Linux 2 L1 v1.0.0Unix

CONFIGURATION MANAGEMENT

1.7.2 Ensure local login warning banner is configured properly - mrsvCIS CentOS 6 Workstation L1 v3.0.0Unix

CONFIGURATION MANAGEMENT

1.7.3 Ensure remote login warning banner is configured properly - mrsvCIS CentOS 6 Workstation L1 v3.0.0Unix

CONFIGURATION MANAGEMENT

1.7.4 Ensure permissions on /etc/motd are configuredCIS CentOS 6 Workstation L1 v3.0.0Unix

ACCESS CONTROL

1.7.5 Ensure permissions on /etc/issue are configuredCIS CentOS 6 Server L1 v3.0.0Unix

ACCESS CONTROL

1.8.1 Ensure message of the day is configured properlyCIS Debian Family Server L1 v1.0.0Unix

CONFIGURATION MANAGEMENT

1.8.5 Ensure remote login warning banner is configured properlyCIS Debian Family Workstation L1 v1.0.0Unix

CONFIGURATION MANAGEMENT

2.1.1.4 Ensure ntp is configured - restrict -6CIS Debian Family Server L1 v1.0.0Unix

AUDIT AND ACCOUNTABILITY

2.2.1.3 Ensure ntp is configured - restrict -4CIS CentOS 6 Server L1 v3.0.0Unix

AUDIT AND ACCOUNTABILITY

2.2.1.3 Ensure ntp is configured - restrict -4CIS CentOS 6 Workstation L1 v3.0.0Unix

AUDIT AND ACCOUNTABILITY

2.2.1.3 Ensure ntp is configured - restrict -6CIS CentOS 6 Server L1 v3.0.0Unix

AUDIT AND ACCOUNTABILITY

4.1 Restrict access to $CATALINA_HOMECIS Apache Tomcat 8 L1 v1.1.0 MiddlewareUnix

ACCESS CONTROL

4.1.18 Ensure the audit configuration is immutableCIS Aliyun Linux 2 L2 v1.0.0Unix

CONFIGURATION MANAGEMENT

4.4 Restrict access to Tomcat logs directoryCIS Apache Tomcat 8 L1 v1.1.0 MiddlewareUnix

ACCESS CONTROL

4.7 Restrict access to Tomcat web application directoryCIS Apache Tomcat 8 L1 v1.1.0Unix

ACCESS CONTROL

4.7 Restrict access to Tomcat web application directoryCIS Apache Tomcat 8 L1 v1.1.0 MiddlewareUnix

ACCESS CONTROL

4.8 Restrict access to Tomcat catalina.propertiesCIS Apache Tomcat 8 L1 v1.1.0Unix

ACCESS CONTROL

4.8 Restrict access to Tomcat catalina.propertiesCIS Apache Tomcat 8 L1 v1.1.0 MiddlewareUnix

ACCESS CONTROL

4.10 Restrict access to Tomcat context.xmlCIS Apache Tomcat 8 L1 v1.1.0Unix

ACCESS CONTROL

4.12 Restrict access to Tomcat server.xmlCIS Apache Tomcat 8 L1 v1.1.0 MiddlewareUnix

ACCESS CONTROL

4.13 Restrict access to Tomcat tomcat-users.xmlCIS Apache Tomcat 8 L1 v1.1.0Unix

ACCESS CONTROL

4.13 Restrict access to Tomcat tomcat-users.xmlCIS Apache Tomcat 8 L1 v1.1.0 MiddlewareUnix

ACCESS CONTROL

4.14 Restrict access to Tomcat web.xmlCIS Apache Tomcat 8 L1 v1.1.0 MiddlewareUnix

ACCESS CONTROL

5.1.1 Ensure cron daemon is enabledCIS CentOS 6 Server L1 v3.0.0Unix

AUDIT AND ACCOUNTABILITY

5.1.1 Ensure cron daemon is enabledCIS CentOS 6 Workstation L1 v3.0.0Unix

AUDIT AND ACCOUNTABILITY

5.1.2 Ensure permissions on /etc/crontab are configuredCIS Debian Family Server L1 v1.0.0Unix

ACCESS CONTROL

5.1.3 Ensure permissions on /etc/cron.hourly are configuredCIS CentOS 6 Server L1 v3.0.0Unix

ACCESS CONTROL

5.1.3 Ensure permissions on /etc/cron.hourly are configuredCIS CentOS 6 Workstation L1 v3.0.0Unix

ACCESS CONTROL

5.1.3 Ensure permissions on /etc/cron.hourly are configuredCIS Debian Family Server L1 v1.0.0Unix

ACCESS CONTROL

5.1.4 Ensure permissions on /etc/cron.daily are configuredCIS CentOS 6 Server L1 v3.0.0Unix

ACCESS CONTROL

5.1.6 Ensure permissions on /etc/cron.monthly are configuredCIS CentOS 6 Workstation L1 v3.0.0Unix

ACCESS CONTROL

5.1.7 Ensure permissions on /etc/cron.d are configuredCIS CentOS 6 Server L1 v3.0.0Unix

ACCESS CONTROL

5.1.9 Ensure at is restricted to authorized users - at.allowCIS Debian Family Server L1 v1.0.0Unix

ACCESS CONTROL

5.3.1 Ensure permissions on /etc/ssh/sshd_config are configuredCIS CentOS 6 Workstation L1 v3.0.0Unix

ACCESS CONTROL

5.3.3 Ensure permissions on SSH public host key files are configuredCIS CentOS 6 Server L1 v3.0.0Unix

ACCESS CONTROL

5.3.13 Ensure SSH PermitUserEnvironment is disabledCIS CentOS 6 Server L1 v3.0.0Unix

CONFIGURATION MANAGEMENT

6.2.5 Ensure users' home directories permissions are 750 or more restrictiveCIS Debian Family Server L1 v1.0.0Unix

ACCESS CONTROL

6.2.8 Ensure all users' home directories existCIS CentOS 6 Server L1 v3.0.0Unix

CONFIGURATION MANAGEMENT

7.6 Ensure directory in logging.properties is a secure location - check application log directory is secureCIS Apache Tomcat 8 L1 v1.1.0 MiddlewareUnix

ACCESS CONTROL

Enable dragging of content from different domains across windows - Internet ZoneMSCT Windows Server v20H2 MS v1.0.0Windows

SYSTEM AND COMMUNICATIONS PROTECTION

Enable dragging of content from different domains across windows - Restricted Sites ZoneMSCT Windows Server v20H2 MS v1.0.0Windows

SYSTEM AND COMMUNICATIONS PROTECTION

Internet Explorer Processes - FEATURE_MIME_HANDLING - explorer.exeMSCT Windows Server v20H2 MS v1.0.0Windows

SYSTEM AND COMMUNICATIONS PROTECTION