Item Search

NameAudit NamePluginCategory
AOSX-15-002070 - The macOS system must use an approved antivirus program.DISA STIG Apple Mac OSX 10.15 v1r10Unix

CONFIGURATION MANAGEMENT

APPL-11-002070 - The macOS system must use an approved antivirus program.DISA STIG Apple macOS 11 v1r5Unix

CONFIGURATION MANAGEMENT

APPL-13-002070 - The macOS system must use an approved antivirus program.DISA STIG Apple macOS 13 v1r5Unix

CONFIGURATION MANAGEMENT

MS.TEAMS.8.1v1 - URL comparison with a blocklist SHOULD be enabled.CISA SCuBA Microsoft 365 Teams v1.5.0microsoft_azure

ACCESS CONTROL, SECURITY ASSESSMENT AND AUTHORIZATION, CONFIGURATION MANAGEMENT, IDENTIFICATION AND AUTHENTICATION, SYSTEM AND SERVICES ACQUISITION, SYSTEM AND COMMUNICATIONS PROTECTION, SYSTEM AND INFORMATION INTEGRITY

OL6-00-000002 - The system must use a separate file system for /var.DISA STIG Oracle Linux 6 v2r7Unix

CONFIGURATION MANAGEMENT

OL6-00-000007 - The system must use a separate file system for user home directories.DISA STIG Oracle Linux 6 v2r7Unix

CONFIGURATION MANAGEMENT

OL6-00-000011 - System security patches and updates must be installed and up-to-date.DISA STIG Oracle Linux 6 v2r7Unix

SYSTEM AND INFORMATION INTEGRITY

OL6-00-000218 - The rlogind service must not be running - CHKCONFIGDISA STIG Oracle Linux 6 v2r7Unix

CONFIGURATION MANAGEMENT

OL6-00-000221 - The ypbind service must not be running - CHKCONFIGDISA STIG Oracle Linux 6 v2r7Unix

CONFIGURATION MANAGEMENT

OL6-00-000227 - The SSH daemon must be configured to use only the SSHv2 protocol.DISA STIG Oracle Linux 6 v2r7Unix

IDENTIFICATION AND AUTHENTICATION

OL6-00-000239 - The SSH daemon must not allow authentication using an empty password.DISA STIG Oracle Linux 6 v2r7Unix

IDENTIFICATION AND AUTHENTICATION

OL6-00-000241 - The SSH daemon must not permit user environment settings.DISA STIG Oracle Linux 6 v2r7Unix

ACCESS CONTROL

OL6-00-000243 - The Oracle Linux 6 operating system must implement DoD-approved encryption to protect the confidentiality of SSH connections.DISA STIG Oracle Linux 6 v2r7Unix

ACCESS CONTROL

OL6-00-000246 - The avahi service must be disabled.DISA STIG Oracle Linux 6 v2r7Unix

CONFIGURATION MANAGEMENT

OL6-00-000249 - Mail relaying must be restricted.DISA STIG Oracle Linux 6 v2r7Unix

CONFIGURATION MANAGEMENT

OL6-00-000253 - The LDAP client must use a TLS connection using trust certificates signed by the site CA.DISA STIG Oracle Linux 6 v2r7Unix

ACCESS CONTROL

OL6-00-000256 - The openldap-servers package must not be installed unless required.DISA STIG Oracle Linux 6 v2r7Unix

CONFIGURATION MANAGEMENT

OL6-00-000257 - The graphical desktop environment must set the idle timeout to no more than 15 minutes.DISA STIG Oracle Linux 6 v2r7Unix

ACCESS CONTROL

OL6-00-000260 - The system must display a publicly-viewable pattern during a graphical desktop environment session lock.DISA STIG Oracle Linux 6 v2r7Unix

ACCESS CONTROL

OL6-00-000261 - The Automatic Bug Reporting Tool (abrtd) service must not be running - CHKCONFIGDISA STIG Oracle Linux 6 v2r7Unix

CONFIGURATION MANAGEMENT

OL6-00-000261 - The Automatic Bug Reporting Tool (abrtd) service must not be running - PROCESS_CHECKDISA STIG Oracle Linux 6 v2r7Unix

CONFIGURATION MANAGEMENT

OL6-00-000262 - The atd service must be disabled - PROCESS_CHECKDISA STIG Oracle Linux 6 v2r7Unix

CONFIGURATION MANAGEMENT

OL6-00-000265 - The ntpdate service must not be running - CHKCONFIGDISA STIG Oracle Linux 6 v2r7Unix

CONFIGURATION MANAGEMENT

OL6-00-000266 - The oddjobd service must not be running - CHKCONFIGDISA STIG Oracle Linux 6 v2r7Unix

CONFIGURATION MANAGEMENT

OL6-00-000268 - The rdisc service must not be running - CHKCONFIGDISA STIG Oracle Linux 6 v2r7Unix

CONFIGURATION MANAGEMENT

OL6-00-000268 - The rdisc service must not be running - PROCESS_CHECKDISA STIG Oracle Linux 6 v2r7Unix

CONFIGURATION MANAGEMENT

OL6-00-000271 - The noexec option must be added to removable media partitions.DISA STIG Oracle Linux 6 v2r7Unix

CONFIGURATION MANAGEMENT

OL6-00-000277 - The operating system must employ cryptographic mechanisms to prevent unauthorized disclosure of data at rest unless otherwise protected by alternative physical measures.DISA STIG Oracle Linux 6 v2r7Unix

CONFIGURATION MANAGEMENT

OL6-00-000289 - The netconsole service must be disabled unless required - 'Running'DISA STIG Oracle Linux 6 v2r7Unix

CONFIGURATION MANAGEMENT

OL6-00-000294 - All GIDs referenced in /etc/passwd must be defined in /etc/group.DISA STIG Oracle Linux 6 v2r7Unix

CONFIGURATION MANAGEMENT

OL6-00-000299 - The system must require passwords to contain no more than three consecutive repeating characters - password-authDISA STIG Oracle Linux 6 v2r7Unix

CONFIGURATION MANAGEMENT

OL6-00-000303 - The operating system must employ automated mechanisms, per organization defined frequency, to detect the addition of unauthorized components/devices into the operating system.DISA STIG Oracle Linux 6 v2r7Unix

CONFIGURATION MANAGEMENT

OL6-00-000313 - The audit system must identify staff members to receive notifications of audit log storage volume capacity issues.DISA STIG Oracle Linux 6 v2r7Unix

AUDIT AND ACCOUNTABILITY

OL6-00-000320 - The systems local firewall must implement a deny-all, allow-by-exception policy for forwarded packets.DISA STIG Oracle Linux 6 v2r7Unix

CONFIGURATION MANAGEMENT

OL6-00-000324 - A login banner must be displayed immediately prior to, or as part of, graphical desktop environment login prompts.DISA STIG Oracle Linux 6 v2r7Unix

ACCESS CONTROL

OL6-00-000334 - Accounts must be locked upon 35 days of inactivity.DISA STIG Oracle Linux 6 v2r7Unix

ACCESS CONTROL

OL6-00-000344 - The system default umask in /etc/profile must be 077.DISA STIG Oracle Linux 6 v2r7Unix

CONFIGURATION MANAGEMENT

OL6-00-000345 - The system default umask in /etc/login.defs must be 077.DISA STIG Oracle Linux 6 v2r7Unix

CONFIGURATION MANAGEMENT

OL6-00-000357 - The system must disable accounts after excessive login failures within a 15-minute interval - password-auth fail_intervalDISA STIG Oracle Linux 6 v2r7Unix

ACCESS CONTROL

OL6-00-000357 - The system must disable accounts after excessive login failures within a 15-minute interval - system-auth fail_intervalDISA STIG Oracle Linux 6 v2r7Unix

ACCESS CONTROL

OL6-00-000383 - Audit log files must have mode 0640 or less permissive.DISA STIG Oracle Linux 6 v2r7Unix

AUDIT AND ACCOUNTABILITY

OL6-00-000510 - The audit system must take appropriate action when the audit storage volume is full.DISA STIG Oracle Linux 6 v2r7Unix

AUDIT AND ACCOUNTABILITY

OL6-00-000516 - The system package management tool must verify ownership on all files and directories associated with packages.DISA STIG Oracle Linux 6 v2r7Unix

CONFIGURATION MANAGEMENT

OL6-00-000522 - Audit log files must be group-owned by root.DISA STIG Oracle Linux 6 v2r7Unix

AUDIT AND ACCOUNTABILITY

OL6-00-000526 - Automated file system mounting tools must not be enabled unless needed - CHKCONFIGDISA STIG Oracle Linux 6 v2r7Unix

CONFIGURATION MANAGEMENT

OL6-00-000528 - The noexec option must be added to the /tmp partition.DISA STIG Oracle Linux 6 v2r7Unix

CONFIGURATION MANAGEMENT

OL6-00-000536 - The Oracle Linux operating system must use the invoking user's password for privilege escalation when using 'sudo' - runaspwDISA STIG Oracle Linux 6 v2r7Unix

ACCESS CONTROL

OL6-00-000536 - The Oracle Linux operating system must use the invoking user's password for privilege escalation when using 'sudo' - targetpwDISA STIG Oracle Linux 6 v2r7Unix

ACCESS CONTROL

OL6-00-000537 - The Oracle Linux operating system must require re-authentication when using the 'sudo' command - sudo command.DISA STIG Oracle Linux 6 v2r7Unix

IDENTIFICATION AND AUTHENTICATION

OL6-00-000540 - The Oracle Linux operating system must specify the default 'include' directory for the /etc/sudoers file - includeDISA STIG Oracle Linux 6 v2r7Unix

CONFIGURATION MANAGEMENT