Item Search

NameAudit NamePluginCategory
3.1 Restrict Core Dumps to Protected Directory - /var/coresCIS Solaris 11 L1 v1.1.0Unix
3.1 Restrict Core Dumps to Protected Directory - init core file patternCIS Solaris 11 L1 v1.1.0Unix

ACCESS CONTROL

3.12 Set Strict Multihoming - persistent ipv6 = 0CIS Solaris 11 L1 v1.1.0Unix

SYSTEM AND COMMUNICATIONS PROTECTION

3.14 Disable TCP Reverse IP Source Routing - persistent tcp = 0CIS Solaris 11 L1 v1.1.0Unix

SYSTEM AND COMMUNICATIONS PROTECTION

3.15 Set Maximum Number of Half-open TCP Connections - current tcp = 4096CIS Solaris 11 L1 v1.1.0Unix

SYSTEM AND COMMUNICATIONS PROTECTION

3.17 Disable Network Routing - ipv6-forwarding persistent = disabledCIS Solaris 11 L1 v1.1.0Unix

SYSTEM AND COMMUNICATIONS PROTECTION

6.2 Disable 'nobody' Access for RPC Encryption Key Storage ServiceCIS Solaris 11 L1 v1.1.0Unix

CONFIGURATION MANAGEMENT, SYSTEM AND COMMUNICATIONS PROTECTION

6.4 Limit Consecutive Login Attempts for SSH - MaxAuthTries = 3CIS Solaris 11 L1 v1.1.0Unix

ACCESS CONTROL

6.6 Disable root login for SSH - PermitRootLogin = noCIS Solaris 11 L1 v1.1.0Unix

ACCESS CONTROL

6.7 Blocking Authentication Using Empty/Null Passwords for SSH - PermitEmptyPasswords = noCIS Solaris 11 L1 v1.1.0Unix

IDENTIFICATION AND AUTHENTICATION

6.9 Restrict FTP UseCIS Solaris 11 L1 v1.1.0Unix

ACCESS CONTROL

6.10 Set Delay between Failed Login Attempts to 4 - SLEEPTIME = 4CIS Solaris 11 L1 v1.1.0Unix

ACCESS CONTROL

6.11 Remove Autologin Capabilities from the GNOME desktopCIS Solaris 11 L1 v1.1.0Unix

ACCESS CONTROL

6.13 Restrict at/cron to Authorized Users - /etc/cron.d/at.allowCIS Solaris 11 L1 v1.1.0Unix

ACCESS CONTROL

6.13 Restrict at/cron to Authorized Users - /etc/cron.d/at.allow permsCIS Solaris 11 L1 v1.1.0Unix

ACCESS CONTROL

6.13 Restrict at/cron to Authorized Users - /etc/cron.d/at.denyCIS Solaris 11 L1 v1.1.0Unix

ACCESS CONTROL

6.13 Restrict at/cron to Authorized Users - /etc/cron.d/cron.allowCIS Solaris 11 L1 v1.1.0Unix

ACCESS CONTROL

6.15 Set Retry Limit for Account Lockout - LOCK_AFTER_RETRIES = yesCIS Solaris 11 L1 v1.1.0Unix

ACCESS CONTROL

7.1 Set Password Expiration Parameters on Active Accounts - loginsCIS Solaris 11 L1 v1.1.0Unix

IDENTIFICATION AND AUTHENTICATION

7.1 Set Password Expiration Parameters on Active Accounts - MAXWEEKS = 13CIS Solaris 11 L1 v1.1.0Unix

IDENTIFICATION AND AUTHENTICATION

7.1 Set Password Expiration Parameters on Active Accounts - WARNWEEKS = 4CIS Solaris 11 L1 v1.1.0Unix

IDENTIFICATION AND AUTHENTICATION

7.2 Set Strong Password Creation Policies - DICTIONLIST = /usr/share/lib/dict/wordsCIS Solaris 11 L1 v1.1.0Unix

IDENTIFICATION AND AUTHENTICATION

7.2 Set Strong Password Creation Policies - MAXREPEATS = 0CIS Solaris 11 L1 v1.1.0Unix

IDENTIFICATION AND AUTHENTICATION

7.2 Set Strong Password Creation Policies - MINLOWER = 1CIS Solaris 11 L1 v1.1.0Unix

IDENTIFICATION AND AUTHENTICATION

7.2 Set Strong Password Creation Policies - MINNONALPHA = 1CIS Solaris 11 L1 v1.1.0Unix

IDENTIFICATION AND AUTHENTICATION

7.2 Set Strong Password Creation Policies - NAMECHECK = yesCIS Solaris 11 L1 v1.1.0Unix

IDENTIFICATION AND AUTHENTICATION

7.3 Set Default umask for users - UMASK = 027CIS Solaris 11 L1 v1.1.0Unix

ACCESS CONTROL

7.5 Set 'mesg n' as Default for All Users - /etc/.login mesg = nCIS Solaris 11 L1 v1.1.0Unix

CONFIGURATION MANAGEMENT

7.5 Set 'mesg n' as Default for All Users - /etc/profile mesg = nCIS Solaris 11 L1 v1.1.0Unix

CONFIGURATION MANAGEMENT

7.6 Lock Inactive User Accounts - useradd -D, 35CIS Solaris 11 L1 v1.1.0Unix

ACCESS CONTROL

8.1 Create Warnings for Standard Login Services - etc/motd contentsCIS Solaris 11 L1 v1.1.0Unix

ACCESS CONTROL

8.5 Check that the Banner Setting for telnet is Null - BANNER =CIS Solaris 11 L1 v1.1.0Unix

ACCESS CONTROL

9.3 Verify System Account Default Passwords - lockedCIS Solaris 11 L1 v1.1.0Unix

ACCESS CONTROL

9.3 Verify System Account Default Passwords - non-loginCIS Solaris 11 L1 v1.1.0Unix

ACCESS CONTROL

9.5 Verify No UID 0 Accounts Exist Other than rootCIS Solaris 11 L1 v1.1.0Unix

ACCESS CONTROL

9.6 Ensure root PATH Integrity - dot in pathCIS Solaris 11 L1 v1.1.0Unix

CONFIGURATION MANAGEMENT

9.6 Ensure root PATH Integrity - writeable dir in pathCIS Solaris 11 L1 v1.1.0Unix

ACCESS CONTROL

9.11 Check Groups in passwd(4)CIS Solaris 11 L1 v1.1.0Unix

ACCESS CONTROL

9.16 Check for Duplicate GIDsCIS Solaris 11 L1 v1.1.0Unix

IDENTIFICATION AND AUTHENTICATION

9.19 Check for Duplicate Group NamesCIS Solaris 11 L1 v1.1.0Unix

IDENTIFICATION AND AUTHENTICATION

9.21 Check for Presence of User .forward FilesCIS Solaris 11 L1 v1.1.0Unix

CONFIGURATION MANAGEMENT

9.24 Find Un-owned Files and DirectoriesCIS Solaris 11 L1 v1.1.0Unix

ACCESS CONTROL

9.24 Find Un-owned Files and DirectoriesCIS Solaris 10 L1 v5.2Unix

ACCESS CONTROL

9.25 Find Files and Directories with Extended AttributesCIS Solaris 11 L1 v1.1.0Unix
10.2 SN.2 Remove Support for Internet Services (inetd)CIS Solaris 11 L2 v1.1.0Unix
GOOG-11-008700 - Google Android 11 users must complete required training.AirWatch - DISA Google Android 11 COPE v2r1MDM

CONFIGURATION MANAGEMENT

MOTS-11-010200 - Motorola Solutions Android 11 must be configured to disallow configuration of date and time.AirWatch - DISA Motorola Solutions Android 11 COBO v1r3MDM

CONFIGURATION MANAGEMENT

MSFT-11-008700 - Microsoft Android 11 users must complete required training.MobileIron - DISA Microsoft Android 11 COBO v1r2MDM

CONFIGURATION MANAGEMENT

MSFT-11-010200 - Microsoft Android 11 must be configured to disallow configuration of date and time.AirWatch - DISA Microsoft Android 11 COBO v1r2MDM

CONFIGURATION MANAGEMENT

ZEBR-11-010200 - Zebra Android 11 must be configured to disallow configuration of date and time.AirWatch - DISA Zebra Android 11 COBO STIG v1r4MDM

CONFIGURATION MANAGEMENT