Item Search

NameAudit NamePluginCategory
ARST-L2-000160 - The Arista MLS layer 2 switch must have all trunk links enabled statically.DISA Arista MLS EOS 4.X L2S STIG v2r3Arista

CONFIGURATION MANAGEMENT

SLEM-05-211010 - SLEM 5 must be a vendor-supported release.DISA SUSE Linux Enterprise Micro SLEM 5 STIG v1r4Unix

CONFIGURATION MANAGEMENT

SLEM-05-211025 - SLEM 5 must disable the x86 Ctrl-Alt-Delete key sequence.DISA SUSE Linux Enterprise Micro SLEM 5 STIG v1r4Unix

CONFIGURATION MANAGEMENT

SLEM-05-212010 - SLEM 5 with a basic input/output system (BIOS) must require authentication upon booting into single-user and maintenance modes.DISA SUSE Linux Enterprise Micro SLEM 5 STIG v1r4Unix

ACCESS CONTROL

SLEM-05-214010 - Vendor-packaged SLEM 5 security patches and updates must be installed and up to date.DISA SUSE Linux Enterprise Micro SLEM 5 STIG v1r4Unix

CONFIGURATION MANAGEMENT

SLEM-05-215010 - SLEM 5 must use vlock to allow for session locking.DISA SUSE Linux Enterprise Micro SLEM 5 STIG v1r4Unix

ACCESS CONTROL

SLEM-05-215015 - SLEM 5 must not have the telnet-server package installed.DISA SUSE Linux Enterprise Micro SLEM 5 STIG v1r4Unix

CONFIGURATION MANAGEMENT, IDENTIFICATION AND AUTHENTICATION

SLEM-05-231025 - SLEM 5 file systems that are being imported via Network File System (NFS) must be mounted to prevent files with the setuid and setgid bit set from being executed.DISA SUSE Linux Enterprise Micro SLEM 5 STIG v1r4Unix

CONFIGURATION MANAGEMENT

SLEM-05-231045 - SLEM 5 file systems that contain user home directories must be mounted to prevent files with the setuid and setgid bit set from being executed.DISA SUSE Linux Enterprise Micro SLEM 5 STIG v1r4Unix

CONFIGURATION MANAGEMENT

SLEM-05-232060 - SLEM 5 library directories must be owned by root.DISA SUSE Linux Enterprise Micro SLEM 5 STIG v1r4Unix

CONFIGURATION MANAGEMENT

SLEM-05-232070 - SLEM 5 must have system commands owned by root.DISA SUSE Linux Enterprise Micro SLEM 5 STIG v1r4Unix

CONFIGURATION MANAGEMENT

SLEM-05-232075 - SLEM 5 must have system commands group-owned by root or a system account.DISA SUSE Linux Enterprise Micro SLEM 5 STIG v1r4Unix

CONFIGURATION MANAGEMENT

SLEM-05-232080 - SLEM 5 must have directories that contain system commands owned by root.DISA SUSE Linux Enterprise Micro SLEM 5 STIG v1r4Unix

CONFIGURATION MANAGEMENT

SLEM-05-251010 - SLEM 5 must be configured to prohibit or restrict the use of functions, ports, protocols, and/or services as defined in the Ports, Protocols, and Services Management (PPSM) Category Assignments List (CAL) and vulnerability assessments.DISA SUSE Linux Enterprise Micro SLEM 5 STIG v1r4Unix

ACCESS CONTROL, CONFIGURATION MANAGEMENT

SLEM-05-252010 - SLEM 5 clock must, for networked systems, be synchronized to an authoritative DOD time source at least every 24 hours.DISA SUSE Linux Enterprise Micro SLEM 5 STIG v1r4Unix

AUDIT AND ACCOUNTABILITY

SLEM-05-252015 - SLEM 5 must not have network interfaces in promiscuous mode unless approved and documented.DISA SUSE Linux Enterprise Micro SLEM 5 STIG v1r4Unix

CONFIGURATION MANAGEMENT

SLEM-05-254035 - SLEM 5 must not be performing Internet Protocol version 6 (IPv6) packet forwarding by default unless the system is a router.DISA SUSE Linux Enterprise Micro SLEM 5 STIG v1r4Unix

CONFIGURATION MANAGEMENT

SLEM-05-255065 - SLEM 5 must log SSH connection attempts and failures to the server.DISA SUSE Linux Enterprise Micro SLEM 5 STIG v1r4Unix

ACCESS CONTROL

SLEM-05-255095 - There must be no shosts.equiv files on SLEM 5.DISA SUSE Linux Enterprise Micro SLEM 5 STIG v1r4Unix

CONFIGURATION MANAGEMENT

SLEM-05-411010 - All SLEM 5 local interactive user accounts, upon creation, must be assigned a home directory.DISA SUSE Linux Enterprise Micro SLEM 5 STIG v1r4Unix

CONFIGURATION MANAGEMENT

SLEM-05-411025 - All SLEM 5 local interactive users must have a home directory assigned in the /etc/passwd file.DISA SUSE Linux Enterprise Micro SLEM 5 STIG v1r4Unix

CONFIGURATION MANAGEMENT

SLEM-05-411040 - All SLEM 5 local initialization files must not execute world-writable programs.DISA SUSE Linux Enterprise Micro SLEM 5 STIG v1r4Unix

CONFIGURATION MANAGEMENT

SLEM-05-411055 - SLEM 5 must not have unnecessary accounts.DISA SUSE Linux Enterprise Micro SLEM 5 STIG v1r4Unix

CONFIGURATION MANAGEMENT

SLEM-05-411070 - SLEM 5 must disable account identifiers (individuals, groups, roles, and devices) after 35 days of inactivity after password expiration.DISA SUSE Linux Enterprise Micro SLEM 5 STIG v1r4Unix

IDENTIFICATION AND AUTHENTICATION

SLEM-05-412015 - SLEM 5 must initiate a session lock after a 15-minute period of inactivity.DISA SUSE Linux Enterprise Micro SLEM 5 STIG v1r4Unix

ACCESS CONTROL

SLEM-05-412025 - SLEM 5 must enforce a delay of at least five seconds between logon prompts following a failed logon attempt via pluggable authentication modules (PAM).DISA SUSE Linux Enterprise Micro SLEM 5 STIG v1r4Unix

CONFIGURATION MANAGEMENT

SLEM-05-432010 - SLEM 5 must use the invoking user's password for privilege escalation when using "sudo".DISA SUSE Linux Enterprise Micro SLEM 5 STIG v1r4Unix

CONFIGURATION MANAGEMENT

SLEM-05-611010 - SLEM 5 must enforce passwords that contain at least one uppercase character.DISA SUSE Linux Enterprise Micro SLEM 5 STIG v1r4Unix

IDENTIFICATION AND AUTHENTICATION

SLEM-05-611020 - SLEM 5 must enforce passwords that contain at least one numeric character.DISA SUSE Linux Enterprise Micro SLEM 5 STIG v1r4Unix

IDENTIFICATION AND AUTHENTICATION

SLEM-05-611025 - SLEM 5 must enforce passwords that contain at least one special character.DISA SUSE Linux Enterprise Micro SLEM 5 STIG v1r4Unix

IDENTIFICATION AND AUTHENTICATION

SLEM-05-611045 - SLEM 5 must not allow passwords to be reused for a minimum of five generations.DISA SUSE Linux Enterprise Micro SLEM 5 STIG v1r4Unix

IDENTIFICATION AND AUTHENTICATION

SLEM-05-611050 - SLEM 5 must configure the Linux Pluggable Authentication Modules (PAM) to only store encrypted representations of passwords.DISA SUSE Linux Enterprise Micro SLEM 5 STIG v1r4Unix

IDENTIFICATION AND AUTHENTICATION

SLEM-05-611095 - SLEM 5 must be configured to create or update passwords with a minimum lifetime of 24 hours (one day).DISA SUSE Linux Enterprise Micro SLEM 5 STIG v1r4Unix

IDENTIFICATION AND AUTHENTICATION

SLEM-05-611100 - SLEM 5 must be configured to create or update passwords with a maximum lifetime of 60 days.DISA SUSE Linux Enterprise Micro SLEM 5 STIG v1r4Unix

IDENTIFICATION AND AUTHENTICATION

SLEM-05-631010 - If Network Security Services (NSS) is being used by SLEM 5 it must prohibit the use of cached authentications after one day.DISA SUSE Linux Enterprise Micro SLEM 5 STIG v1r4Unix

IDENTIFICATION AND AUTHENTICATION

SLEM-05-651010 - SLEM 5 must use a file integrity tool to verify correct operation of all security functions.DISA SUSE Linux Enterprise Micro SLEM 5 STIG v1r4Unix

CONFIGURATION MANAGEMENT

SLEM-05-653010 - SLEM 5 must have the auditing package installed.DISA SUSE Linux Enterprise Micro SLEM 5 STIG v1r4Unix

AUDIT AND ACCOUNTABILITY, CONFIGURATION MANAGEMENT

SLEM-05-653025 - SLEM 5 must allocate audit record storage capacity to store at least one week of audit records when audit records are not immediately sent to a central audit record storage facility.DISA SUSE Linux Enterprise Micro SLEM 5 STIG v1r4Unix

AUDIT AND ACCOUNTABILITY

SLEM-05-653030 - SLEM 5 auditd service must notify the system administrator (SA) and information system security officer (ISSO) immediately when audit storage capacity is 75 percent full.DISA SUSE Linux Enterprise Micro SLEM 5 STIG v1r4Unix

AUDIT AND ACCOUNTABILITY

SLEM-05-653065 - SLEM 5 audit event multiplexor must be configured to use Kerberos.DISA SUSE Linux Enterprise Micro SLEM 5 STIG v1r4Unix

AUDIT AND ACCOUNTABILITY

SLEM-05-654010 - SLEM 5 must generate audit records for all uses of the "chacl" command.DISA SUSE Linux Enterprise Micro SLEM 5 STIG v1r4Unix

AUDIT AND ACCOUNTABILITY

SLEM-05-654015 - SLEM 5 must generate audit records for all uses of the "chage" command.DISA SUSE Linux Enterprise Micro SLEM 5 STIG v1r4Unix

AUDIT AND ACCOUNTABILITY, MAINTENANCE

SLEM-05-654020 - SLEM 5 must generate audit records for all uses of the "chcon" command.DISA SUSE Linux Enterprise Micro SLEM 5 STIG v1r4Unix

AUDIT AND ACCOUNTABILITY, MAINTENANCE

SLEM-05-654025 - SLEM 5 must generate audit records for all uses of the "chfn" command.DISA SUSE Linux Enterprise Micro SLEM 5 STIG v1r4Unix

AUDIT AND ACCOUNTABILITY, MAINTENANCE

SLEM-05-654055 - SLEM 5 must generate audit records for all uses of the "kmod" command.DISA SUSE Linux Enterprise Micro SLEM 5 STIG v1r4Unix

AUDIT AND ACCOUNTABILITY, MAINTENANCE

SLEM-05-654060 - SLEM 5 must generate audit records for all uses of the "modprobe" command.DISA SUSE Linux Enterprise Micro SLEM 5 STIG v1r4Unix

AUDIT AND ACCOUNTABILITY, MAINTENANCE

SLEM-05-654075 - SLEM 5 must generate audit records for all uses of the "passwd" command.DISA SUSE Linux Enterprise Micro SLEM 5 STIG v1r4Unix

AUDIT AND ACCOUNTABILITY, MAINTENANCE

SLEM-05-654090 - SLEM 5 must generate audit records for all uses of the "setfacl" command.DISA SUSE Linux Enterprise Micro SLEM 5 STIG v1r4Unix

AUDIT AND ACCOUNTABILITY

SLEM-05-654100 - SLEM 5 must generate audit records for all uses of the "ssh-keysign" command.DISA SUSE Linux Enterprise Micro SLEM 5 STIG v1r4Unix

AUDIT AND ACCOUNTABILITY, MAINTENANCE

VCWN-06-000047 - The system must require an administrator to unlock an account locked due to excessive login failures.DISA VMware vSphere vCenter Server Version 6 STIG v1r4VMware

ACCESS CONTROL