Item Search

NameAudit NamePluginCategory
MD4X-00-001550 - MongoDB must limit the total number of concurrent connections to the database.DISA STIG MongoDB Enterprise Advanced 4.x v1r4 OSUnix

ACCESS CONTROL

MD4X-00-002100 - MongoDB software installation account must be restricted to authorized users.DISA STIG MongoDB Enterprise Advanced 4.x v1r4 OSUnix

CONFIGURATION MANAGEMENT

MD4X-00-003100 - MongoDB must enforce authorized access to all PKI private keys stored/utilized by MongoDB.DISA STIG MongoDB Enterprise Advanced 4.x v1r4 OSUnix

IDENTIFICATION AND AUTHENTICATION

MD4X-00-006000 - MongoDB must maintain the confidentiality and integrity of information during preparation for transmission.DISA STIG MongoDB Enterprise Advanced 4.x v1r4 OSUnix

SYSTEM AND COMMUNICATIONS PROTECTION

MD4X-00-006300 - When updates are applied to MongoDB software, any software components that have been replaced or made unnecessary must be removed.DISA STIG MongoDB Enterprise Advanced 4.x v1r4 OSUnix

SYSTEM AND INFORMATION INTEGRITY

SLEM-05-211020 - SLEM 5 must display the Standard Mandatory DOD Notice and Consent Banner before granting any local or remote connection to the system.DISA SUSE Linux Enterprise Micro SLEM 5 STIG v1r4Unix

ACCESS CONTROL

SLEM-05-213025 - SLEM 5 must implement kptr-restrict to prevent the leaking of internal kernel addresses.DISA SUSE Linux Enterprise Micro SLEM 5 STIG v1r4Unix

SYSTEM AND INFORMATION INTEGRITY

SLEM-05-231020 - SLEM 5 must use a separate file system for the system audit data path.DISA SUSE Linux Enterprise Micro SLEM 5 STIG v1r4Unix

CONFIGURATION MANAGEMENT

SLEM-05-231040 - All SLEM 5 persistent disk partitions must implement cryptographic mechanisms to prevent unauthorized disclosure or modification of all information that requires at-rest protection.DISA SUSE Linux Enterprise Micro SLEM 5 STIG v1r4Unix

SYSTEM AND COMMUNICATIONS PROTECTION

SLEM-05-231050 - SLEM 5 must disable the file system automounter.DISA SUSE Linux Enterprise Micro SLEM 5 STIG v1r4Unix

IDENTIFICATION AND AUTHENTICATION

SLEM-05-232020 - SLEM 5 library directories must have mode 755 or less permissive.DISA SUSE Linux Enterprise Micro SLEM 5 STIG v1r4Unix

CONFIGURATION MANAGEMENT

SLEM-05-232025 - SLEM 5 library files must have mode 755 or less permissive.DISA SUSE Linux Enterprise Micro SLEM 5 STIG v1r4Unix

CONFIGURATION MANAGEMENT

SLEM-05-232045 - SLEM 5 SSH daemon private host key files must have mode 640 or less permissive.DISA SUSE Linux Enterprise Micro SLEM 5 STIG v1r4Unix

CONFIGURATION MANAGEMENT

SLEM-05-232065 - SLEM 5 library directories must be group-owned by root.DISA SUSE Linux Enterprise Micro SLEM 5 STIG v1r4Unix

CONFIGURATION MANAGEMENT

SLEM-05-232090 - All SLEM 5 files and directories must have a valid owner.DISA SUSE Linux Enterprise Micro SLEM 5 STIG v1r4Unix

CONFIGURATION MANAGEMENT

SLEM-05-232095 - All SLEM 5 files and directories must have a valid group owner.DISA SUSE Linux Enterprise Micro SLEM 5 STIG v1r4Unix

CONFIGURATION MANAGEMENT

SLEM-05-232105 - All SLEM 5 world-writable directories must be group-owned by root, sys, bin, or an application group.DISA SUSE Linux Enterprise Micro SLEM 5 STIG v1r4Unix

CONFIGURATION MANAGEMENT

SLEM-05-232120 - SLEM 5 must generate error messages that provide information necessary for corrective actions without revealing information that could be exploited by adversaries.DISA SUSE Linux Enterprise Micro SLEM 5 STIG v1r4Unix

SYSTEM AND INFORMATION INTEGRITY

SLEM-05-253010 - SLEM 5 must not forward Internet Protocol version 4 (IPv4) source-routed packets.DISA SUSE Linux Enterprise Micro SLEM 5 STIG v1r4Unix

CONFIGURATION MANAGEMENT

SLEM-05-253020 - SLEM 5 must prevent Internet Protocol version 4 (IPv4) Internet Control Message Protocol (ICMP) redirect messages from being accepted.DISA SUSE Linux Enterprise Micro SLEM 5 STIG v1r4Unix

CONFIGURATION MANAGEMENT

SLEM-05-253040 - SLEM 5 must not be performing Internet Protocol version 4 (IPv4) packet forwarding unless the system is a router.DISA SUSE Linux Enterprise Micro SLEM 5 STIG v1r4Unix

CONFIGURATION MANAGEMENT

SLEM-05-253045 - SLEM 5 must be configured to use TCP syncookies.DISA SUSE Linux Enterprise Micro SLEM 5 STIG v1r4Unix

SYSTEM AND COMMUNICATIONS PROTECTION

SLEM-05-255045 - SLEM 5 must implement DOD-approved encryption to protect the confidentiality of SSH remote connections.DISA SUSE Linux Enterprise Micro SLEM 5 STIG v1r4Unix

ACCESS CONTROL, MAINTENANCE

SLEM-05-255050 - SLEM 5 SSH daemon must be configured to only use Message Authentication Codes (MACs) employing FIPS 140-2/140-3 approved cryptographic hash algorithms.DISA SUSE Linux Enterprise Micro SLEM 5 STIG v1r4Unix

MAINTENANCE

SLEM-05-255060 - SLEM 5 must deny direct logons to the root account using remote access via SSH.DISA SUSE Linux Enterprise Micro SLEM 5 STIG v1r4Unix

IDENTIFICATION AND AUTHENTICATION

SLEM-05-291010 - SLEM 5 wireless network adapters must be disabled unless approved and documented.DISA SUSE Linux Enterprise Micro SLEM 5 STIG v1r4Unix

ACCESS CONTROL, SYSTEM AND COMMUNICATIONS PROTECTION

SLEM-05-291015 - SLEM 5 must disable the USB mass storage kernel module.DISA SUSE Linux Enterprise Micro SLEM 5 STIG v1r4Unix

IDENTIFICATION AND AUTHENTICATION

SLEM-05-411035 - All SLEM 5 local interactive user initialization files executable search paths must contain only paths that resolve to the users' home directory.DISA SUSE Linux Enterprise Micro SLEM 5 STIG v1r4Unix

CONFIGURATION MANAGEMENT

SLEM-05-431010 - SLEM 5 must have policycoreutils package installed.DISA SUSE Linux Enterprise Micro SLEM 5 STIG v1r4Unix

SYSTEM AND COMMUNICATIONS PROTECTION

SLEM-05-431020 - SLEM 5 must enable the SELinux targeted policy.DISA SUSE Linux Enterprise Micro SLEM 5 STIG v1r4Unix

SYSTEM AND INFORMATION INTEGRITY

SLEM-05-432015 - SLEM 5 must reauthenticate users when changing authenticators, roles, or escalating privileges.DISA SUSE Linux Enterprise Micro SLEM 5 STIG v1r4Unix

IDENTIFICATION AND AUTHENTICATION

SLEM-05-611030 - SLEM 5 must prevent the use of dictionary words for passwords.DISA SUSE Linux Enterprise Micro SLEM 5 STIG v1r4Unix

CONFIGURATION MANAGEMENT

SLEM-05-611040 - SLEM 5 must require the change of at least eight of the total number of characters when passwords are changed.DISA SUSE Linux Enterprise Micro SLEM 5 STIG v1r4Unix

IDENTIFICATION AND AUTHENTICATION

SLEM-05-611070 - SLEM 5 must employ user passwords with a maximum lifetime of 60 days.DISA SUSE Linux Enterprise Micro SLEM 5 STIG v1r4Unix

IDENTIFICATION AND AUTHENTICATION

SLEM-05-612020 - SLEM 5 must implement certificate status checking for multifactor authentication.DISA SUSE Linux Enterprise Micro SLEM 5 STIG v1r4Unix

IDENTIFICATION AND AUTHENTICATION

SLEM-05-652010 - SLEM 5 must offload rsyslog messages for networked systems in real time and offload standalone systems at least weekly.DISA SUSE Linux Enterprise Micro SLEM 5 STIG v1r4Unix

AUDIT AND ACCOUNTABILITY

SLEM-05-653015 - SLEM 5 audit records must contain information to establish what type of events occurred, the source of events, where events occurred, and the outcome of events.DISA SUSE Linux Enterprise Micro SLEM 5 STIG v1r4Unix

AUDIT AND ACCOUNTABILITY, MAINTENANCE

SLEM-05-653040 - SLEM 5 must offload audit records onto a different system or media from the system being audited.DISA SUSE Linux Enterprise Micro SLEM 5 STIG v1r4Unix

AUDIT AND ACCOUNTABILITY

SLEM-05-653055 - SLEM 5 audit tools must have the proper permissions configured to protect against unauthorized access.DISA SUSE Linux Enterprise Micro SLEM 5 STIG v1r4Unix

AUDIT AND ACCOUNTABILITY

SLEM-05-654040 - SLEM 5 must generate audit records for all uses of the "crontab" command.DISA SUSE Linux Enterprise Micro SLEM 5 STIG v1r4Unix

AUDIT AND ACCOUNTABILITY, MAINTENANCE

SLEM-05-654050 - SLEM 5 must generate audit records for all uses of the "insmod" command.DISA SUSE Linux Enterprise Micro SLEM 5 STIG v1r4Unix

AUDIT AND ACCOUNTABILITY, MAINTENANCE

SLEM-05-654065 - SLEM 5 must generate audit records for all uses of the "newgrp" command.DISA SUSE Linux Enterprise Micro SLEM 5 STIG v1r4Unix

AUDIT AND ACCOUNTABILITY, MAINTENANCE

SLEM-05-654180 - SLEM 5 must generate audit records for all uses of the "setxattr", "fsetxattr", "lsetxattr", "removexattr", "fremovexattr", and "lremovexattr" system calls.DISA SUSE Linux Enterprise Micro SLEM 5 STIG v1r4Unix

AUDIT AND ACCOUNTABILITY, MAINTENANCE

VCWN-06-000009 - The system must use Active Directory authentication.DISA VMware vSphere vCenter Server Version 6 STIG v1r4VMware

IDENTIFICATION AND AUTHENTICATION

VCWN-06-000012 - The system must disable the distributed virtual switch health check.DISA VMware vSphere vCenter Server Version 6 STIG v1r4VMware

CONFIGURATION MANAGEMENT

VCWN-06-000036 - The system must produce audit records containing information to establish what type of events occurred.DISA VMware vSphere vCenter Server Version 6 STIG v1r4VMware

AUDIT AND ACCOUNTABILITY

VCWN-06-000042 - Passwords must contain at least one numeric character.DISA VMware vSphere vCenter Server Version 6 STIG v1r4VMware

IDENTIFICATION AND AUTHENTICATION

VCWN-06-000046 - The system must set the interval for counting failed login attempts to at least 15 minutes.DISA VMware vSphere vCenter Server Version 6 STIG v1r4VMware

ACCESS CONTROL

VCWN-06-000051 - The system must protect the confidentiality and integrity of transmitted info by isolating IP-based storage traffic.DISA VMware vSphere vCenter Server Version 6 STIG v1r4VMware

CONFIGURATION MANAGEMENT

VCWN-06-100005 - The vCenter Server users must have the correct roles assigned.DISA VMware vSphere vCenter Server Version 6 STIG v1r4VMware

SYSTEM AND COMMUNICATIONS PROTECTION