800-53|CM-6c.

Title

CONFIGURATION SETTINGS

Description

Identifies, documents, and approves any deviations from established configuration settings for [Assignment: organization-defined information system components] based on [Assignment: organization-defined operational requirements]; and

Reference Item Details

Category: CONFIGURATION MANAGEMENT

Family: CONFIGURATION MANAGEMENT

Baseline Impact: LOW,MODERATE,HIGH

Audit Items

View all Reference Audit Items

NamePluginAudit Name
2.2.21 Ensure the TFTP server has not been installed - TFTP server package installed if not required for operational support.UnixCIS Red Hat Enterprise Linux 7 STIG v2.0.0 STIG
GEN002380 - The owner, group-owner, mode, ACL, and location of files with the setuid bit set must be documented using site-defined procedures.UnixDISA STIG for Oracle Linux 5 v2r1
GEN002380 - The owner, group, mode, ACL, and location of files with the setuid bit set must be documented using site-defined proceduresUnixDISA STIG AIX 5.3 v1r2
GEN002380 - The owner, group, mode, ACL, and location of files with the setuid bit set must be documented using site-defined proceduresUnixDISA STIG AIX 6.1 v1r14
GEN002380 - The owner, group, mode, ACL, and location of files with the setuid bit set must be documented using site-defined procedures.UnixDISA STIG for Red Hat Enterprise Linux 5 v1r18 Audit
GEN002440 - The owner, group-owner, mode, ACL and location of files with the 'sgid' bit set must be documented.UnixDISA STIG for Red Hat Enterprise Linux 5 v1r18 Audit
GEN002440 - The owner, group-owner, mode, ACL and location of files with the setgid bit set must be documented using site-defined procedures - sgid bit set must be documented.UnixDISA STIG for Oracle Linux 5 v2r1
RHEL-07-020900 - The Red Hat Enterprise Linux operating system must be configured so that all system device files are correctly labeled to prevent unauthorized modification.UnixDISA Red Hat Enterprise Linux 7 STIG v3r15
RHEL-07-021700 - The Red Hat Enterprise Linux operating system must not allow removable media to be used as the boot loader unless approved.UnixDISA Red Hat Enterprise Linux 7 STIG v3r15
RHEL-07-031010 - The Red Hat Enterprise Linux operating system must be configured so that the rsyslog daemon does not accept log messages from other servers unless the server is being used for log aggregation.UnixDISA Red Hat Enterprise Linux 7 STIG v3r15
RHEL-07-040700 - The Red Hat Enterprise Linux operating system must not have the Trivial File Transfer Protocol (TFTP) server package installed if not required for operational support.UnixDISA Red Hat Enterprise Linux 7 STIG v3r15
UBTU-16-030720 - The Trivial File Transfer Protocol (TFTP) server package must not be installed if not required for operational support.UnixDISA STIG Ubuntu 16.04 LTS v2r3