800-53|CM-7a.

Title

LEAST FUNCTIONALITY

Description

Configures the information system to provide only essential capabilities; and

Reference Item Details

Category: CONFIGURATION MANAGEMENT

Family: CONFIGURATION MANAGEMENT

Baseline Impact: LOW,MODERATE,HIGH

Audit Items

View all Reference Audit Items

NamePluginAudit Name
1.1 Secure Login and Telnet Disabling - Enable SSH serverZTE_ROSNGTenable ZTE ROSNG
1.01 Windows platform - 'Do not install Oracle on a domain controller'WindowsCIS v1.1.0 Oracle 11g OS Windows Level 1
1.1.1.1 Ensure cramfs kernel module is not availableUnixCIS Rocky Linux 8 v3.0.0 L1 Workstation
1.1.1.1 Ensure cramfs kernel module is not availableUnixCIS Red Hat Enterprise Linux 8 v4.0.0 L1 Server
1.1.1.1 Ensure cramfs kernel module is not availableUnixCIS SUSE Linux Enterprise 15 v2.0.1 L1 Server
1.1.1.1 Ensure cramfs kernel module is not availableUnixCIS Debian Linux 13 v1.0.0 L1 Server
1.1.1.1 Ensure cramfs kernel module is not availableUnixCIS AlmaLinux OS 10 v1.0.0 L1 Workstation
1.1.1.1 Ensure cramfs kernel module is not availableUnixCIS AlmaLinux OS 8 v4.0.0 L1 Server
1.1.1.1 Ensure cramfs kernel module is not availableUnixCIS Oracle Linux 10 v1.0.0 L1 Server
1.1.1.1 Ensure cramfs kernel module is not availableUnixCIS Oracle Linux 10 v1.0.0 L1 Workstation
1.1.1.1 Ensure cramfs kernel module is not availableUnixCIS Oracle Linux 8 v4.0.0 L1 Workstation
1.1.1.1 Ensure cramfs kernel module is not availableUnixCIS Debian Linux 13 v1.0.0 L1 Workstation
1.1.1.1 Ensure cramfs kernel module is not availableUnixCIS Red Hat Enterprise Linux 10 v1.0.1 L1 Server
1.1.1.1 Ensure cramfs kernel module is not availableUnixCIS Rocky Linux 10 v1.0.0 L1 Server
1.1.1.1 Ensure cramfs kernel module is not availableUnixCIS Rocky Linux 10 v1.0.0 L1 Workstation
1.1.1.1 Ensure cramfs kernel module is not availableUnixCIS Ubuntu Linux 22.04 LTS v3.0.0 L1 Server
1.1.1.1 Ensure cramfs kernel module is not availableUnixCIS Ubuntu Linux 22.04 LTS v3.0.0 L1 Workstation
1.1.1.1 Ensure cramfs kernel module is not availableUnixCIS SUSE Linux Enterprise 15 v2.0.1 L1 Workstation
1.1.1.1 Ensure cramfs kernel module is not availableUnixCIS Ubuntu Linux 20.04 LTS v3.0.0 L1 Server
1.1.1.1 Ensure cramfs kernel module is not availableUnixCIS Red Hat Enterprise Linux 10 v1.0.1 L1 Workstation
1.1.1.1 Ensure cramfs kernel module is not availableUnixCIS Red Hat Enterprise Linux 8 v4.0.0 L1 Workstation
1.1.1.1 Ensure cramfs kernel module is not availableUnixCIS AlmaLinux OS 10 v1.0.0 L1 Server
1.1.1.1 Ensure cramfs kernel module is not availableUnixCIS AlmaLinux OS 8 v4.0.0 L1 Workstation
1.1.1.1 Ensure cramfs kernel module is not availableUnixCIS Rocky Linux 8 v3.0.0 L1 Server
1.1.1.1 Ensure cramfs kernel module is not availableUnixCIS Ubuntu Linux 20.04 LTS v3.0.0 L1 Workstation
1.1.1.1 Ensure cramfs kernel module is not availableUnixCIS Oracle Linux 8 v4.0.0 L1 Server
1.1.1.2 Ensure freevxfs kernel module is not availableUnixCIS SUSE Linux Enterprise 15 v2.0.1 L1 Server
1.1.1.2 Ensure freevxfs kernel module is not availableUnixCIS Ubuntu Linux 20.04 LTS v3.0.0 L1 Server
1.1.1.2 Ensure freevxfs kernel module is not availableUnixCIS SUSE Linux Enterprise 15 v2.0.1 L1 Workstation
1.1.1.2 Ensure freevxfs kernel module is not availableUnixCIS Ubuntu Linux 20.04 LTS v3.0.0 L1 Workstation
1.1.1.3 Ensure hfs kernel module is not availableUnixCIS Ubuntu Linux 20.04 LTS v3.0.0 L1 Workstation
1.1.1.3 Ensure hfs kernel module is not availableUnixCIS SUSE Linux Enterprise 15 v2.0.1 L1 Server
1.1.1.3 Ensure hfs kernel module is not availableUnixCIS SUSE Linux Enterprise 15 v2.0.1 L1 Workstation
1.1.1.3 Ensure hfs kernel module is not availableUnixCIS Ubuntu Linux 20.04 LTS v3.0.0 L1 Server
1.1.1.4 Ensure hfsplus kernel module is not availableUnixCIS SUSE Linux Enterprise 15 v2.0.1 L1 Server
1.1.1.4 Ensure hfsplus kernel module is not availableUnixCIS SUSE Linux Enterprise 15 v2.0.1 L1 Workstation
1.1.1.4 Ensure hfsplus kernel module is not availableUnixCIS Ubuntu Linux 20.04 LTS v3.0.0 L1 Server
1.1.1.4 Ensure hfsplus kernel module is not availableUnixCIS Ubuntu Linux 20.04 LTS v3.0.0 L1 Workstation
1.1.1.11 Ensure the operating system disables the ability to load the firewire-core kernel moduleUnixCIS Red Hat Enterprise Linux 8 STIG v2.0.0 STIG
1.1.1.12 Ensure a camera is not installedUnixCIS Red Hat Enterprise Linux 8 STIG v2.0.0 STIG
1.100 APPL-14-002120UnixCIS Apple macOS 14 (Sonoma) STIG v1.0.0 CAT II
1.101 APPL-14-002130UnixCIS Apple macOS 14 (Sonoma) STIG v1.0.0 CAT II
1.102 APPL-14-002140UnixCIS Apple macOS 14 (Sonoma) STIG v1.0.0 CAT II
1.103 APPL-14-002150UnixCIS Apple macOS 14 (Sonoma) STIG v1.0.0 CAT II
1.104 APPL-14-002160UnixCIS Apple macOS 14 (Sonoma) STIG v1.0.0 CAT II
1.105 APPL-14-002170UnixCIS Apple macOS 14 (Sonoma) STIG v1.0.0 CAT II
1.106 APPL-14-002180UnixCIS Apple macOS 14 (Sonoma) STIG v1.0.0 CAT II
1.106 RHEL-09-231195UnixCIS Red Hat Enterprise Linux 9 STIG v1.0.0 CAT III
1.107 APPL-14-002190UnixCIS Apple macOS 14 (Sonoma) STIG v1.0.0 CAT II
1.108 APPL-14-002200UnixCIS Apple macOS 14 (Sonoma) STIG v1.0.0 CAT II