Item Search

NameAudit NamePluginCategory
2.3.7.5 (L1) Configure 'Interactive logon: Message text for users attempting to log on'CIS Microsoft Windows 8.1 v2.4.1 L1 BitlockerWindows

CONFIGURATION MANAGEMENT, IDENTIFICATION AND AUTHENTICATION

AADC-CL-000210 - Adobe Acrobat Pro DC Classic Enhanced Security for browser mode must be enabled.DISA STIG Adobe Acrobat Pro DC Classic Track v2r1Windows

SYSTEM AND COMMUNICATIONS PROTECTION

GEN000595 - The password hashes stored on the system must have been generated using a FIPS 140-2 approved cryptographic hashing algorithm - /etc/passwdDISA STIG Solaris 10 X86 v2r4Unix

IDENTIFICATION AND AUTHENTICATION

OL6-00-000001 - The system must use a separate file system for /tmp.DISA STIG Oracle Linux 6 v2r7Unix

CONFIGURATION MANAGEMENT

OL6-00-000004 - The system must use a separate file system for the system audit data path.DISA STIG Oracle Linux 6 v2r7Unix

CONFIGURATION MANAGEMENT

OL6-00-000033 - The /etc/shadow file must be owned by root.DISA STIG Oracle Linux 6 v2r7Unix

CONFIGURATION MANAGEMENT

OL6-00-000174 - The operating system must automatically audit account creation - '/etc/security/opasswd'DISA STIG Oracle Linux 6 v2r7Unix

ACCESS CONTROL

OL6-00-000174 - The operating system must automatically audit account creation - '/etc/shadow'DISA STIG Oracle Linux 6 v2r7Unix

ACCESS CONTROL

OL6-00-000175 - The operating system must automatically audit account modification - '/etc/gshadow'DISA STIG Oracle Linux 6 v2r7Unix

ACCESS CONTROL

OL6-00-000175 - The operating system must automatically audit account modification - '/etc/passwd'DISA STIG Oracle Linux 6 v2r7Unix

ACCESS CONTROL

OL6-00-000176 - The operating system must automatically audit account disabling actions - '/etc/group'DISA STIG Oracle Linux 6 v2r7Unix

ACCESS CONTROL

OL6-00-000177 - The operating system must automatically audit account termination - '/etc/shadow'DISA STIG Oracle Linux 6 v2r7Unix

ACCESS CONTROL

OL6-00-000185 - The audit system must be configured to audit all discretionary access control permission modifications using chown, fchown, fchownat, and lchown - b64 auid=0DISA STIG Oracle Linux 6 v2r7Unix

AUDIT AND ACCOUNTABILITY

OL6-00-000190 - The audit system must be configured to audit all discretionary access control permission modifications using setxattr, lsetxattr, fsetxattr, removexattr, lremovexattr, and fremovexattr - b32 auid>=500DISA STIG Oracle Linux 6 v2r7Unix

AUDIT AND ACCOUNTABILITY

OL6-00-000197 - The audit system must be configured to audit failed attempts to access files and programs - b32 EACCES auid>=500DISA STIG Oracle Linux 6 v2r7Unix

AUDIT AND ACCOUNTABILITY

OL6-00-000199 - The audit system must be configured to audit successful file system mounts - b32 auid=0DISA STIG Oracle Linux 6 v2r7Unix

AUDIT AND ACCOUNTABILITY

OL6-00-000199 - The audit system must be configured to audit successful file system mounts - b64 auid>=500DISA STIG Oracle Linux 6 v2r7Unix

AUDIT AND ACCOUNTABILITY

OL6-00-000200 - The audit system must be configured to audit user deletions of files and programs - b32 auid=0DISA STIG Oracle Linux 6 v2r7Unix

AUDIT AND ACCOUNTABILITY

OL6-00-000200 - The audit system must be configured to audit user deletions of files and programs - b64 auid=0DISA STIG Oracle Linux 6 v2r7Unix

AUDIT AND ACCOUNTABILITY

OL6-00-000202 - The audit system must be configured to audit the loading and unloading of dynamic kernel modules - module b32DISA STIG Oracle Linux 6 v2r7Unix

AUDIT AND ACCOUNTABILITY

OL6-00-000211 - The telnet daemon must not be running - CHKCONFIGDISA STIG Oracle Linux 6 v2r7Unix

CONFIGURATION MANAGEMENT

OL6-00-000211 - The telnet daemon must not be running - PROCESS_CHECKDISA STIG Oracle Linux 6 v2r7Unix

CONFIGURATION MANAGEMENT

OL6-00-000221 - The ypbind service must not be running - PROCESS_CHECKDISA STIG Oracle Linux 6 v2r7Unix

CONFIGURATION MANAGEMENT

OL6-00-000223 - The TFTP service must not be running - CHKCONFIGDISA STIG Oracle Linux 6 v2r7Unix

CONFIGURATION MANAGEMENT

OL6-00-000224 - The cron service must be running.DISA STIG Oracle Linux 6 v2r7Unix

CONFIGURATION MANAGEMENT

OL6-00-000231 - The SSH daemon must set a timeout count on idle sessions.DISA STIG Oracle Linux 6 v2r7Unix

MAINTENANCE

OL6-00-000237 - The system must not permit root logins using remote access programs such as ssh.DISA STIG Oracle Linux 6 v2r7Unix

IDENTIFICATION AND AUTHENTICATION

OL6-00-000247 - The system clock must be synchronized continuously, or at least daily - CHKCONFIGDISA STIG Oracle Linux 6 v2r7Unix

AUDIT AND ACCOUNTABILITY

OL6-00-000252 - If the system is using LDAP for authentication or account information, the system must use a TLS connection using FIPS 140-2 approved cryptographic algorithms.DISA STIG Oracle Linux 6 v2r7Unix

ACCESS CONTROL

OL6-00-000267 - The qpidd service must not be running - CHKCONFIGDISA STIG Oracle Linux 6 v2r7Unix

CONFIGURATION MANAGEMENT

OL6-00-000270 - Remote file systems must be mounted with the nosuid option.DISA STIG Oracle Linux 6 v2r7Unix

CONFIGURATION MANAGEMENT

OL6-00-000275 - The operating system must employ cryptographic mechanisms to protect information in storage.DISA STIG Oracle Linux 6 v2r7Unix

CONFIGURATION MANAGEMENT

OL6-00-000279 - The system package management tool must verify ownership on all files and directories associated with the audit package.DISA STIG Oracle Linux 6 v2r7Unix

AUDIT AND ACCOUNTABILITY

OL6-00-000282 - There must be no world-writable files on the system.DISA STIG Oracle Linux 6 v2r7Unix

CONFIGURATION MANAGEMENT

OL6-00-000285 - The Oracle Linux operating system must implement the Endpoint Security for Linux Threat Prevention tool - mcafeetp processDISA STIG Oracle Linux 6 v2r7Unix

SYSTEM AND INFORMATION INTEGRITY

OL6-00-000296 - All accounts on the system must have unique user or account names.DISA STIG Oracle Linux 6 v2r7Unix

IDENTIFICATION AND AUTHENTICATION

OL6-00-000305 - The operating system must provide a near real-time alert when any of the organization defined list of compromise or potential compromise indicators occurs.DISA STIG Oracle Linux 6 v2r7Unix

CONFIGURATION MANAGEMENT

OL6-00-000319 - The system must limit users to 10 simultaneous system logins, or a site-defined number, in accordance with operational requirements.DISA STIG Oracle Linux 6 v2r7Unix

ACCESS CONTROL

OL6-00-000331 - The Bluetooth service must be disabled - CHKCONFIGDISA STIG Oracle Linux 6 v2r7Unix

CONFIGURATION MANAGEMENT

OL6-00-000338 - The TFTP daemon must operate in secure mode which provides access only to a single directory on the host file system.DISA STIG Oracle Linux 6 v2r7Unix

CONFIGURATION MANAGEMENT

OL6-00-000339 - The FTP daemon must be configured for logging or verbose mode - 'xferlog_enable'DISA STIG Oracle Linux 6 v2r7Unix

AUDIT AND ACCOUNTABILITY

OL6-00-000339 - The FTP daemon must be configured for logging or verbose mode - 'xferlog_std_format'DISA STIG Oracle Linux 6 v2r7Unix

AUDIT AND ACCOUNTABILITY

OL6-00-000347 - There must be no .netrc files on the system.DISA STIG Oracle Linux 6 v2r7Unix

IDENTIFICATION AND AUTHENTICATION

OL6-00-000356 - The system must require administrator action to unlock an account locked by excessive failed login attempts - password-authDISA STIG Oracle Linux 6 v2r7Unix

ACCESS CONTROL

OL6-00-000384 - Audit log files must be owned by root.DISA STIG Oracle Linux 6 v2r7Unix

AUDIT AND ACCOUNTABILITY

OL6-00-000508 - The system must allow locking of graphical desktop sessions.DISA STIG Oracle Linux 6 v2r7Unix

ACCESS CONTROL

OL6-00-000518 - The system package management tool must verify permissions on all files and directories associated with packages.DISA STIG Oracle Linux 6 v2r7Unix

CONFIGURATION MANAGEMENT

OL6-00-000525 - Auditing must be enabled at boot by setting a kernel parameter.DISA STIG Oracle Linux 6 v2r7Unix

AUDIT AND ACCOUNTABILITY

OL6-00-000532 - The Oracle Linux operating system must mount /dev/shm with the noexec option.DISA STIG Oracle Linux 6 v2r7Unix

CONFIGURATION MANAGEMENT

OL6-00-000535 - The Oracle Linux operating system must restrict privilege elevation to authorized personnel - sudoers.dDISA STIG Oracle Linux 6 v2r7Unix

CONFIGURATION MANAGEMENT