Item Search

NameAudit NamePluginCategory
1.1.1.1 Ensure mounting of cramfs filesystems is disabled - modprobeCIS CentOS 6 Workstation L1 v3.0.0Unix

CONFIGURATION MANAGEMENT

1.1.1.4 Ensure mounting of hfs filesystems is disabled - modprobeCIS CentOS 6 Server L1 v3.0.0Unix

CONFIGURATION MANAGEMENT

1.1.1.5 Ensure mounting of hfsplus filesystems is disabled - modprobeCIS CentOS 6 Workstation L1 v3.0.0Unix

CONFIGURATION MANAGEMENT

1.1.1.6 Ensure mounting of squashfs filesystems is disabled - modprobeCIS CentOS 6 Workstation L1 v3.0.0Unix

CONFIGURATION MANAGEMENT

1.1.1.7 Ensure mounting of udf filesystems is disabled - modprobeCIS CentOS 6 Server L1 v3.0.0Unix

CONFIGURATION MANAGEMENT

1.1.1.7 Ensure mounting of udf filesystems is disabled - modprobeCIS CentOS 6 Workstation L1 v3.0.0Unix

CONFIGURATION MANAGEMENT

1.1.2 Ensure /tmp is configuredCIS Aliyun Linux 2 L1 v1.0.0Unix

CONFIGURATION MANAGEMENT

1.1.3 Ensure nodev option set on /tmp partitionCIS CentOS 6 Workstation L1 v3.0.0Unix

CONFIGURATION MANAGEMENT

1.1.5 Ensure noexec option set on /tmp partitionCIS CentOS 6 Server L1 v3.0.0Unix

CONFIGURATION MANAGEMENT

1.1.5 Ensure noexec option set on /tmp partitionCIS CentOS 6 Workstation L1 v3.0.0Unix

CONFIGURATION MANAGEMENT

1.1.6 Ensure separate partition exists for /varCIS CentOS 6 Server L2 v3.0.0Unix

CONFIGURATION MANAGEMENT

1.1.8 Ensure nodev option set on /var/tmp partitionCIS CentOS 6 Workstation L1 v3.0.0Unix

CONFIGURATION MANAGEMENT

1.1.9 Ensure nosuid option set on /var/tmp partitionCIS CentOS 6 Workstation L1 v3.0.0Unix

CONFIGURATION MANAGEMENT

1.1.13 Ensure separate partition exists for /homeCIS CentOS 6 Server L2 v3.0.0Unix

CONFIGURATION MANAGEMENT

1.1.15 Ensure nodev option set on /dev/shm partitionCIS CentOS 6 Workstation L1 v3.0.0Unix

CONFIGURATION MANAGEMENT

1.1.16 Ensure nosuid option set on /dev/shm partitionCIS CentOS 6 Workstation L1 v3.0.0Unix

CONFIGURATION MANAGEMENT

1.1.17 Ensure noexec option set on /dev/shm partitionCIS CentOS 6 Server L1 v3.0.0Unix

CONFIGURATION MANAGEMENT

1.1.18 Ensure nodev option set on removable media partitionsCIS CentOS 6 Server L1 v3.0.0Unix

CONFIGURATION MANAGEMENT

1.1.19 Ensure nosuid option set on removable media partitionsCIS CentOS 6 Server L1 v3.0.0Unix

CONFIGURATION MANAGEMENT

1.1.20 Ensure noexec option set on removable media partitionsCIS CentOS 6 Workstation L1 v3.0.0Unix

CONFIGURATION MANAGEMENT

1.7.1.3 Ensure remote login warning banner is configured properly - msrvCIS Aliyun Linux 2 L1 v1.0.0Unix

CONFIGURATION MANAGEMENT

2.2.18 Ensure mail transfer agent is configured for local-only modeCIS CentOS 6 Workstation L1 v3.0.0Unix

CONFIGURATION MANAGEMENT

3.4.5 Ensure permissions on /etc/hosts.deny are configuredCIS CentOS 6 Server L1 v3.0.0Unix

ACCESS CONTROL

4.2.3 Ensure permissions on all logfiles are configuredCIS Aliyun Linux 2 L1 v1.0.0Unix

CONFIGURATION MANAGEMENT

4.5 Restrict access to Tomcat temp directoryCIS Apache Tomcat 8 L1 v1.1.0Unix

ACCESS CONTROL

4.5 Restrict access to Tomcat temp directoryCIS Apache Tomcat 8 L1 v1.1.0 MiddlewareUnix

ACCESS CONTROL

4.6 Restrict access to Tomcat binaries directoryCIS Apache Tomcat 8 L1 v1.1.0Unix

ACCESS CONTROL

4.12 Restrict access to Tomcat server.xmlCIS Apache Tomcat 8 L1 v1.1.0Unix

ACCESS CONTROL

5.1.2 Ensure permissions on /etc/crontab are configuredCIS CentOS 6 Server L1 v3.0.0Unix

ACCESS CONTROL

5.1.4 Ensure permissions on /etc/cron.daily are configuredCIS Aliyun Linux 2 L1 v1.0.0Unix

CONFIGURATION MANAGEMENT

5.1.5 Ensure permissions on /etc/cron.weekly are configuredCIS CentOS 6 Server L1 v3.0.0Unix

ACCESS CONTROL

5.1.6 Ensure permissions on /etc/cron.monthly are configuredCIS CentOS 6 Server L1 v3.0.0Unix

ACCESS CONTROL

5.1.8 Ensure at/cron is restricted to authorized usersCIS Aliyun Linux 2 L1 v1.0.0Unix

CONFIGURATION MANAGEMENT

5.1.8 Ensure at/cron is restricted to authorized users - at.allowCIS Aliyun Linux 2 L1 v1.0.0Unix

CONFIGURATION MANAGEMENT

5.2.4 Ensure permissions on SSH public host key files are configuredCIS Aliyun Linux 2 L1 v1.0.0Unix

CONFIGURATION MANAGEMENT

5.3.1 Ensure permissions on /etc/ssh/sshd_config are configuredCIS CentOS 6 Server L1 v3.0.0Unix

ACCESS CONTROL

7.1 Application specific loggingCIS Apache Tomcat 8 L2 v1.1.0Unix

AUDIT AND ACCOUNTABILITY

7.6 Ensure directory in logging.properties is a secure location - check application log directory is secureCIS Apache Tomcat 8 L1 v1.1.0Unix

ACCESS CONTROL

10.7 Turn off session facade recyclingCIS Apache Tomcat 8 L1 v1.1.0Unix

CONFIGURATION MANAGEMENT

Allow indexing of encrypted filesMSCT Windows 10 v20H2 v1.0.0Windows

CONFIGURATION MANAGEMENT

Allow indexing of encrypted filesMSCT Windows Server v2004 DC v1.0.0Windows

CONFIGURATION MANAGEMENT

Allow indexing of encrypted filesMSCT Windows Server 2019 DC v1.0.0Windows

CONFIGURATION MANAGEMENT

Interactive logon: Do not require CTRL+ALT+DELMSCT Windows Server 2012 R2 DC v1.0.0Windows

CONFIGURATION MANAGEMENT

System objects: Strengthen default permissions of internal system objects (e.g. Symbolic Links)MSCT Windows Server v1909 MS v1.0.0Windows

CONFIGURATION MANAGEMENT

System objects: Strengthen default permissions of internal system objects (e.g. Symbolic Links)MSCT Windows Server v2004 DC v1.0.0Windows

CONFIGURATION MANAGEMENT

System objects: Strengthen default permissions of internal system objects (e.g. Symbolic Links)MSCT Windows Server 2019 DC v1.0.0Windows

CONFIGURATION MANAGEMENT

System objects: Strengthen default permissions of internal system objects (e.g. Symbolic Links)MSCT Windows Server v20H2 DC v1.0.0Windows

CONFIGURATION MANAGEMENT

Turn off Internet download for Web publishing and online ordering wizardsMSCT Windows 10 1909 v1.0.0Windows

CONFIGURATION MANAGEMENT

Turn off Internet download for Web publishing and online ordering wizardsMSCT Windows 10 v20H2 v1.0.0Windows

CONFIGURATION MANAGEMENT

Turn off Internet download for Web publishing and online ordering wizardsMSCT Windows 10 v21H2 v1.0.0Windows

CONFIGURATION MANAGEMENT