Item Search

NameAudit NamePluginCategory
18.8.48.11.1 (L2) Ensure 'Enable/Disable PerfTrack' is set to 'Disabled'CIS Microsoft Windows Server 2008 R2 Member Server Level 2 v3.3.1Windows

CONFIGURATION MANAGEMENT

18.8.48.11.1 (L2) Ensure 'Enable/Disable PerfTrack' is set to 'Disabled'CIS Microsoft Windows Server 2008 Domain Controller Level 2 v3.3.1Windows

CONFIGURATION MANAGEMENT

18.9.19.1 (L1) Ensure 'Turn off desktop gadgets' is set to 'Enabled'CIS Microsoft Windows Server 2008 R2 Member Server Level 1 v3.3.1Windows

CONFIGURATION MANAGEMENT

18.9.46.11.1 (L2) Ensure 'Enable/Disable PerfTrack' is set to 'Disabled'CIS Windows Server 2012 DC L2 v3.0.0Windows

CONFIGURATION MANAGEMENT

18.9.46.11.1 (L2) Ensure 'Enable/Disable PerfTrack' is set to 'Disabled'CIS Windows Server 2012 MS L2 v3.0.0Windows

CONFIGURATION MANAGEMENT

18.9.46.11.1 (L2) Ensure 'Enable/Disable PerfTrack' is set to 'Disabled'CIS Windows Server 2012 R2 MS L2 v3.0.0Windows

CONFIGURATION MANAGEMENT

18.9.49.11.1 Ensure 'Enable/Disable PerfTrack' is set to 'Disabled'CIS Microsoft Windows Server 2022 v5.1.0 L2 MSWindows

CONFIGURATION MANAGEMENT

OL07-00-010020 - The Oracle Linux operating system must be configured so that the cryptographic hash of system files and commands matches vendor values.DISA Oracle Linux 7 STIG v3r5Unix

CONFIGURATION MANAGEMENT

OL07-00-010030 - The Oracle Linux operating system must display the Standard Mandatory DoD Notice and Consent Banner before granting local or remote access to the system via a graphical user logon.DISA Oracle Linux 7 STIG v3r5Unix

ACCESS CONTROL

OL07-00-010062 - The Oracle Linux operating system must prevent a user from overriding the screensaver lock-enabled setting for the graphical user interface.DISA Oracle Linux 7 STIG v3r5Unix

ACCESS CONTROL

OL07-00-010118 - The Oracle Linux operating system must be configured so that /etc/pam.d/passwd implements /etc/pam.d/system-auth when changing passwords.DISA Oracle Linux 7 STIG v3r5Unix

IDENTIFICATION AND AUTHENTICATION

OL07-00-010119 - The Oracle Linux operating system must be configured so that when passwords are changed or new passwords are established, pwquality must be used.DISA Oracle Linux 7 STIG v3r5Unix

IDENTIFICATION AND AUTHENTICATION

OL07-00-010199 - The Oracle Linux operating system must be configured to prevent overwriting of custom authentication configuration settings by the authconfig utility.DISA Oracle Linux 7 STIG v3r5Unix

IDENTIFICATION AND AUTHENTICATION

OL07-00-010250 - The Oracle Linux operating system must be configured so that passwords for new users are restricted to a 60-day maximum lifetime.DISA Oracle Linux 7 STIG v3r5Unix

IDENTIFICATION AND AUTHENTICATION

OL07-00-010290 - The Oracle Linux operating system must not allow accounts configured with blank or null passwords.DISA Oracle Linux 7 STIG v3r5Unix

CONFIGURATION MANAGEMENT

OL07-00-010310 - The Oracle Linux operating system must disable account identifiers (individuals, groups, roles, and devices) if the password expires - individuals, groups, roles, and devices if the password expires.DISA Oracle Linux 7 STIG v3r5Unix

IDENTIFICATION AND AUTHENTICATION

OL07-00-010375 - The Oracle Linux operating system must restrict access to the kernel message buffer.DISA Oracle Linux 7 STIG v3r5Unix

SYSTEM AND COMMUNICATIONS PROTECTION

OL07-00-020020 - The Oracle Linux operating system must prevent nonprivileged users from executing privileged functions to include disabling, circumventing, or altering implemented security safeguards/countermeasures.DISA Oracle Linux 7 STIG v3r5Unix

ACCESS CONTROL

OL07-00-020021 - The Oracle Linux operating system must confine SELinux users to roles that conform to least privilege.DISA Oracle Linux 7 STIG v3r5Unix

ACCESS CONTROL

OL07-00-020029 - The Oracle Linux operating system must use a file integrity tool to verify correct operation of all security functions.DISA Oracle Linux 7 STIG v3r5Unix

SYSTEM AND INFORMATION INTEGRITY

OL07-00-020210 - The Oracle Linux operating system must enable SELinux.DISA Oracle Linux 7 STIG v3r5Unix

ACCESS CONTROL, SYSTEM AND INFORMATION INTEGRITY

OL07-00-020300 - The Oracle Linux operating system must be configured so that all Group Identifiers (GIDs) referenced in the /etc/passwd file are defined in the /etc/group file - GIDs referenced in the /etc/passwd file are defined in the /etc/group file.DISA Oracle Linux 7 STIG v3r5Unix

IDENTIFICATION AND AUTHENTICATION

OL07-00-020640 - The Oracle Linux operating system must be configured so that all local interactive user home directories are owned by their respective users.DISA Oracle Linux 7 STIG v3r5Unix

CONFIGURATION MANAGEMENT

OL07-00-020700 - The Oracle Linux operating system must be configured so that all local initialization files for local interactive users are be group-owned by the users primary group or root.DISA Oracle Linux 7 STIG v3r5Unix

CONFIGURATION MANAGEMENT

OL07-00-020720 - The Oracle Linux operating system must be configured so that all local interactive user initialization files executable search paths contain only paths that resolve to the users home directory.DISA Oracle Linux 7 STIG v3r5Unix

CONFIGURATION MANAGEMENT

OL07-00-021010 - The Oracle Linux operating system must prevent files with the setuid and setgid bit set from being executed on file systems that are used with removable media.DISA Oracle Linux 7 STIG v3r5Unix

CONFIGURATION MANAGEMENT

OL07-00-021024 - The Oracle Linux operating system must mount /dev/shm with secure options.DISA Oracle Linux 7 STIG v3r5Unix

CONFIGURATION MANAGEMENT

OL07-00-021040 - The Oracle Linux operating system must set the umask value to 077 for all local interactive user accounts.DISA Oracle Linux 7 STIG v3r5Unix

CONFIGURATION MANAGEMENT

OL07-00-021340 - The Oracle Linux operating system must use a separate file system for /tmp (or equivalent) - or equivalent.DISA Oracle Linux 7 STIG v3r5Unix

CONFIGURATION MANAGEMENT

OL07-00-021600 - The Oracle Linux operating system must be configured so that the file integrity tool is configured to verify Access Control Lists (ACLs) - ACLsDISA Oracle Linux 7 STIG v3r5Unix

CONFIGURATION MANAGEMENT

OL07-00-030211 - The Oracle Linux operating system must label all off-loaded audit logs before sending them to the central log server.DISA Oracle Linux 7 STIG v3r5Unix

AUDIT AND ACCOUNTABILITY

OL07-00-030360 - The Oracle Linux operating system must audit all executions of privileged functions.DISA Oracle Linux 7 STIG v3r5Unix

ACCESS CONTROL

OL07-00-030510 - The Oracle Linux operating system must audit all uses of the creat, open, openat, open_by_handle_at, truncate, and ftruncate syscalls.DISA Oracle Linux 7 STIG v3r5Unix

AUDIT AND ACCOUNTABILITY, MAINTENANCE

OL07-00-030570 - The Oracle Linux operating system must audit all uses of the setsebool command.DISA Oracle Linux 7 STIG v3r5Unix

MAINTENANCE

OL07-00-030590 - The Oracle Linux operating system must audit all uses of the setfiles command.DISA Oracle Linux 7 STIG v3r5Unix

MAINTENANCE

OL07-00-030720 - The Oracle Linux operating system must audit all uses of the chsh command.DISA Oracle Linux 7 STIG v3r5Unix

AUDIT AND ACCOUNTABILITY

OL07-00-030740 - The Oracle Linux operating system must audit all uses of the mount command and syscall.DISA Oracle Linux 7 STIG v3r5Unix

AUDIT AND ACCOUNTABILITY, MAINTENANCE

OL07-00-030870 - The Oracle Linux operating system must generate audit records for all account creations, modifications, disabling, and termination events that affect /etc/passwd.DISA Oracle Linux 7 STIG v3r5Unix

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY

OL07-00-030873 - The Oracle Linux operating system must generate audit records for all account creations, modifications, disabling, and termination events that affect /etc/shadow.DISA Oracle Linux 7 STIG v3r5Unix

ACCESS CONTROL

OL07-00-040000 - The Oracle Linux operating system must limit the number of concurrent sessions to 10 for all accounts and/or account types.DISA Oracle Linux 7 STIG v3r5Unix

ACCESS CONTROL

OL07-00-040330 - The Oracle Linux operating system must be configured so that the SSH daemon does not allow authentication using RSA rhosts authentication.DISA Oracle Linux 7 STIG v3r5Unix

CONFIGURATION MANAGEMENT

OL07-00-040630 - The Oracle Linux operating system must not respond to Internet Protocol version 4 (IPv4) Internet Control Message Protocol (ICMP) echoes sent to a broadcast address.DISA Oracle Linux 7 STIG v3r5Unix

CONFIGURATION MANAGEMENT

OL07-00-040641 - The Oracle Linux operating system must ignore Internet Protocol version 4 (IPv4) Internet Control Message Protocol (ICMP) redirect messages.DISA Oracle Linux 7 STIG v3r5Unix

CONFIGURATION MANAGEMENT

OL07-00-040660 - The Oracle Linux operating system must not send Internet Protocol version 4 (IPv4) Internet Control Message Protocol (ICMP) redirects.DISA Oracle Linux 7 STIG v3r5Unix

CONFIGURATION MANAGEMENT

OL07-00-040690 - The Oracle Linux operating system must not have a File Transfer Protocol (FTP) server package installed unless needed - FTP server package installed unless needed.DISA Oracle Linux 7 STIG v3r5Unix

CONFIGURATION MANAGEMENT

OL07-00-040711 - The Oracle Linux operating system SSH daemon must prevent remote hosts from connecting to the proxy display.DISA Oracle Linux 7 STIG v3r5Unix

CONFIGURATION MANAGEMENT

OL07-00-040720 - The Oracle Linux operating system must be configured so that if the Trivial File Transfer Protocol (TFTP) server is required, the TFTP daemon is configured to operate in secure mode - TFTP server is required, the TFTP daemon is configured to operate in secure mode.DISA Oracle Linux 7 STIG v3r5Unix

CONFIGURATION MANAGEMENT

OL07-00-040730 - The Oracle Linux operating system must not have a graphical display manager installed unless approved.DISA Oracle Linux 7 STIG v3r5Unix

CONFIGURATION MANAGEMENT

OL07-00-041003 - The Oracle Linux operating system must implement certificate status checking for PKI authentication.DISA Oracle Linux 7 STIG v3r5Unix

IDENTIFICATION AND AUTHENTICATION

OL07-00-041010 - The Oracle Linux operating system must be configured so that all wireless network adapters are disabled.DISA Oracle Linux 7 STIG v3r5Unix

SYSTEM AND COMMUNICATIONS PROTECTION