Item Search

NameAudit NamePluginCategory
AIOS-26-014500 - Apple iOS/iPadOS 26 must disable connections to Siri servers for the purpose of translation.AirWatch - DISA Apple iOS/iPadOS 26 v1r3MDM

CONFIGURATION MANAGEMENT

OL6-00-000002 - The system must use a separate file system for /var.DISA STIG Oracle Linux 6 v2r7Unix

CONFIGURATION MANAGEMENT

OL6-00-000007 - The system must use a separate file system for user home directories.DISA STIG Oracle Linux 6 v2r7Unix

CONFIGURATION MANAGEMENT

OL6-00-000011 - System security patches and updates must be installed and up-to-date.DISA STIG Oracle Linux 6 v2r7Unix

SYSTEM AND INFORMATION INTEGRITY

OL6-00-000019 - There must be no .rhosts or hosts.equiv files on the system - '/etc/hosts.equiv'DISA STIG Oracle Linux 6 v2r7Unix

CONFIGURATION MANAGEMENT

OL6-00-000021 - The Oracle Linux operating system must not contain .shosts or shosts.equiv files.DISA STIG Oracle Linux 6 v2r7Unix

CONFIGURATION MANAGEMENT

OL6-00-000031 - The /etc/passwd file must not contain password hashes.DISA STIG Oracle Linux 6 v2r7Unix

CONFIGURATION MANAGEMENT

OL6-00-000034 - The /etc/shadow file must be group-owned by root.DISA STIG Oracle Linux 6 v2r7Unix

CONFIGURATION MANAGEMENT

OL6-00-000037 - The /etc/gshadow file must be group-owned by root.DISA STIG Oracle Linux 6 v2r7Unix

CONFIGURATION MANAGEMENT

OL6-00-000041 - The /etc/passwd file must have mode 0644 or less permissive.DISA STIG Oracle Linux 6 v2r7Unix

CONFIGURATION MANAGEMENT

OL6-00-000044 - The /etc/group file must have mode 0644 or less permissive.DISA STIG Oracle Linux 6 v2r7Unix

CONFIGURATION MANAGEMENT

OL6-00-000045 - Library files must have mode 0755 or less permissive - '/lib'DISA STIG Oracle Linux 6 v2r7Unix

CONFIGURATION MANAGEMENT

OL6-00-000046 - Library files must be owned by a system account - '/lib'DISA STIG Oracle Linux 6 v2r7Unix

CONFIGURATION MANAGEMENT

OL6-00-000046 - Library files must be owned by a system account - '/usr/lib'DISA STIG Oracle Linux 6 v2r7Unix

CONFIGURATION MANAGEMENT

OL6-00-000046 - Library files must be owned by a system account - '/usr/lib64'DISA STIG Oracle Linux 6 v2r7Unix

CONFIGURATION MANAGEMENT

OL6-00-000047 - All system command files must have mode 755 or less permissive - '/usr/bin'DISA STIG Oracle Linux 6 v2r7Unix

CONFIGURATION MANAGEMENT

OL6-00-000051 - Users must not be able to change passwords more than once every 24 hours.DISA STIG Oracle Linux 6 v2r7Unix

IDENTIFICATION AND AUTHENTICATION

OL6-00-000055 - System and application account passwords must be changed at least annually.DISA STIG Oracle Linux 6 v2r7Unix

IDENTIFICATION AND AUTHENTICATION

OL6-00-000056 - The system must require passwords to contain at least one numeric character - password-authDISA STIG Oracle Linux 6 v2r7Unix

IDENTIFICATION AND AUTHENTICATION

OL6-00-000058 - The system must require passwords to contain at least one special character - password-authDISA STIG Oracle Linux 6 v2r7Unix

IDENTIFICATION AND AUTHENTICATION

OL6-00-000058 - The system must require passwords to contain at least one special character - system-authDISA STIG Oracle Linux 6 v2r7Unix

IDENTIFICATION AND AUTHENTICATION

OL6-00-000066 - The system boot loader configuration file(s) must be group-owned by root.DISA STIG Oracle Linux 6 v2r7Unix

CONFIGURATION MANAGEMENT

OL6-00-000070 - The system must not permit interactive boot.DISA STIG Oracle Linux 6 v2r7Unix

ACCESS CONTROL

OL6-00-000071 - The system must be configured so all network connections associated with a communication session are terminated at the end of the session or after 15 minutes of inactivity from the user at a command prompt, except to fulfill documented and validated mission requirements.DISA STIG Oracle Linux 6 v2r7Unix

ACCESS CONTROL

OL6-00-000078 - The system must implement virtual address space randomization.DISA STIG Oracle Linux 6 v2r7Unix

CONFIGURATION MANAGEMENT

OL6-00-000106 - The operating system must connect to external networks or information systems only through managed IPv6 interfaces consisting of boundary protection devices arranged in accordance with an organizational security architecture.DISA STIG Oracle Linux 6 v2r7Unix

CONFIGURATION MANAGEMENT

OL6-00-000117 - The operating system must prevent public IPv4 access into an organizations internal networks, except as appropriately mediated by managed interfaces employing boundary protection devices.DISA STIG Oracle Linux 6 v2r7Unix

CONFIGURATION MANAGEMENT

OL6-00-000133 - All rsyslog-generated log files must be owned by root.DISA STIG Oracle Linux 6 v2r7Unix

SYSTEM AND INFORMATION INTEGRITY

OL6-00-000154 - The operating system must produce audit records containing sufficient information to establish what type of events occurred - CHKCONFIGDISA STIG Oracle Linux 6 v2r7Unix

AUDIT AND ACCOUNTABILITY

OL6-00-000154 - The operating system must produce audit records containing sufficient information to establish what type of events occurred - PROCESS_CHECKDISA STIG Oracle Linux 6 v2r7Unix

AUDIT AND ACCOUNTABILITY

OL6-00-000165 - The audit system must be configured to audit all attempts to alter system time through adjtimex - b32DISA STIG Oracle Linux 6 v2r7Unix

AUDIT AND ACCOUNTABILITY

OL6-00-000167 - The audit system must be configured to audit all attempts to alter system time through settimeofday - b64DISA STIG Oracle Linux 6 v2r7Unix

AUDIT AND ACCOUNTABILITY

OL6-00-000169 - The audit system must be configured to audit all attempts to alter system time through stime - b32DISA STIG Oracle Linux 6 v2r7Unix

AUDIT AND ACCOUNTABILITY

OL6-00-000173 - The audit system must be configured to audit all attempts to alter system time through /etc/localtime.DISA STIG Oracle Linux 6 v2r7Unix

AUDIT AND ACCOUNTABILITY

OL6-00-000175 - The operating system must automatically audit account modification - '/etc/shadow'DISA STIG Oracle Linux 6 v2r7Unix

ACCESS CONTROL

OL6-00-000182 - The audit system must be configured to audit modifications to the systems network configuration - '/etc/hosts'DISA STIG Oracle Linux 6 v2r7Unix

CONFIGURATION MANAGEMENT

OL6-00-000344 - The system default umask in /etc/profile must be 077.DISA STIG Oracle Linux 6 v2r7Unix

CONFIGURATION MANAGEMENT

OL6-00-000345 - The system default umask in /etc/login.defs must be 077.DISA STIG Oracle Linux 6 v2r7Unix

CONFIGURATION MANAGEMENT

OL6-00-000357 - The system must disable accounts after excessive login failures within a 15-minute interval - password-auth fail_intervalDISA STIG Oracle Linux 6 v2r7Unix

ACCESS CONTROL

OL6-00-000357 - The system must disable accounts after excessive login failures within a 15-minute interval - system-auth fail_intervalDISA STIG Oracle Linux 6 v2r7Unix

ACCESS CONTROL

OL6-00-000383 - Audit log files must have mode 0640 or less permissive.DISA STIG Oracle Linux 6 v2r7Unix

AUDIT AND ACCOUNTABILITY

OL6-00-000510 - The audit system must take appropriate action when the audit storage volume is full.DISA STIG Oracle Linux 6 v2r7Unix

AUDIT AND ACCOUNTABILITY

OL6-00-000516 - The system package management tool must verify ownership on all files and directories associated with packages.DISA STIG Oracle Linux 6 v2r7Unix

CONFIGURATION MANAGEMENT

OL6-00-000522 - Audit log files must be group-owned by root.DISA STIG Oracle Linux 6 v2r7Unix

AUDIT AND ACCOUNTABILITY

OL6-00-000526 - Automated file system mounting tools must not be enabled unless needed - CHKCONFIGDISA STIG Oracle Linux 6 v2r7Unix

CONFIGURATION MANAGEMENT

OL6-00-000528 - The noexec option must be added to the /tmp partition.DISA STIG Oracle Linux 6 v2r7Unix

CONFIGURATION MANAGEMENT

OL6-00-000536 - The Oracle Linux operating system must use the invoking user's password for privilege escalation when using 'sudo' - runaspwDISA STIG Oracle Linux 6 v2r7Unix

ACCESS CONTROL

OL6-00-000536 - The Oracle Linux operating system must use the invoking user's password for privilege escalation when using 'sudo' - targetpwDISA STIG Oracle Linux 6 v2r7Unix

ACCESS CONTROL

OL6-00-000537 - The Oracle Linux operating system must require re-authentication when using the 'sudo' command - sudo command.DISA STIG Oracle Linux 6 v2r7Unix

IDENTIFICATION AND AUTHENTICATION

OL6-00-000540 - The Oracle Linux operating system must specify the default 'include' directory for the /etc/sudoers file - includeDISA STIG Oracle Linux 6 v2r7Unix

CONFIGURATION MANAGEMENT