CCI|CCI-002696

Title

Verify correct operation of organization-defined security functions.

Reference Item Details

Category: 2024

Audit Items

View all Reference Audit Items

NamePluginAudit Name
1.6 UBTU-24-100100UnixCIS Ubuntu Linux 24.04 LTS STIG v1.0.0 CAT II
1.6.1.3 Ensure SELinux policy is configuredUnixCIS Amazon Linux 2 STIG v2.0.0 L1 Workstation
1.6.1.3 Ensure SELinux policy is configuredUnixCIS Red Hat Enterprise Linux 7 STIG v2.0.0 STIG
1.6.1.3 Ensure SELinux policy is configuredUnixCIS Amazon Linux 2 STIG v2.0.0 L1 Server
1.6.1.3 Ensure SELinux policy is configuredUnixCIS Amazon Linux 2 STIG v2.0.0 STIG
1.6.1.5 Ensure the SELinux mode is enforcingUnixCIS Amazon Linux 2 STIG v2.0.0 STIG
1.6.1.5 Ensure the SELinux mode is enforcingUnixCIS Amazon Linux 2 STIG v2.0.0 L2 Workstation
1.6.1.5 Ensure the SELinux mode is enforcingUnixCIS Amazon Linux 2 STIG v2.0.0 L2 Server
1.6.1.5 Ensure the SELinux mode is enforcingUnixCIS Red Hat Enterprise Linux 7 STIG v2.0.0 STIG
1.7 UBTU-24-100110UnixCIS Ubuntu Linux 24.04 LTS STIG v1.0.0 CAT II
1.56 OL08-00-010359UnixCIS Oracle Linux 8 STIG v1.0.0 CAT II
1.82 OL08-00-010450UnixCIS Oracle Linux 8 STIG v1.0.0 CAT II
1.111 UBTU-22-651010UnixCIS Ubuntu Linux 22.04 LTS STIG v1.0.0 CAT II
1.112 UBTU-22-651015UnixCIS Ubuntu Linux 22.04 LTS STIG v1.0.0 CAT II
1.152 APPL-14-005100UnixCIS Apple macOS 14 (Sonoma) STIG v1.0.0 CAT II
1.298 RHEL-09-431010UnixCIS Red Hat Enterprise Linux 9 STIG v1.0.0 CAT I
1.299 RHEL-09-431015UnixCIS Red Hat Enterprise Linux 9 STIG v1.0.0 CAT II
1.351 RHEL-09-651010UnixCIS Red Hat Enterprise Linux 9 STIG v1.0.0 CAT II
ALMA-09-045230 - AlmaLinux OS 9 must enable the SELinux targeted policy.UnixDISA CloudLinux AlmaLinux OS 9 STIG v1r3
ALMA-09-045340 - AlmaLinux OS 9 must have the Advanced Intrusion Detection Environment (AIDE) package installed.UnixDISA CloudLinux AlmaLinux OS 9 STIG v1r3
APPL-14-005100 - The macOS system must ensure secure boot level set to full.UnixDISA Apple macOS 14 (Sonoma) STIG v2r3
APPL-15-005100 - The macOS system must ensure Secure Boot level is set to "full".UnixDISA Apple macOS 15 (Sequoia) STIG v1r4
AZLX-23-001060 - Amazon Linux 2023 must have the Advanced Intrusion Detection Environment (AIDE) package installed.UnixDISA Amazon Linux 2023 STIG v1r1
AZLX-23-002445 - Amazon Linux 2023 must enable the SELinux targeted policy.UnixDISA Amazon Linux 2023 STIG v1r1
AZLX-23-002450 - Amazon Linux 2023 must use a Linux Security Module configured to enforce limits on system services.UnixDISA Amazon Linux 2023 STIG v1r1
ESXI-80-000085 - The ESXi host must implement Secure Boot enforcement.UnixDISA VMware vSphere 8.0 ESXi STIG v2r3 Unix
GEN006570 - The file integrity tool must be configured to verify ACLs - configUnixDISA STIG Solaris 10 X86 v2r4
GEN006570 - The file integrity tool must be configured to verify ACLs - configUnixDISA STIG Solaris 10 SPARC v2r4
GEN006570 - The file integrity tool must be configured to verify ACLs - usedUnixDISA STIG Solaris 10 X86 v2r4
GEN006570 - The file integrity tool must be configured to verify ACLs - usedUnixDISA STIG Solaris 10 SPARC v2r4
GEN006570 - The file integrity tool must be configured to verify ACLs.UnixDISA STIG for Oracle Linux 5 v2r1
GEN006571 - The file integrity tool must be configured to verify extended attributes - configUnixDISA STIG Solaris 10 X86 v2r4
GEN006571 - The file integrity tool must be configured to verify extended attributes - configUnixDISA STIG Solaris 10 SPARC v2r4
GEN006571 - The file integrity tool must be configured to verify extended attributes - usedUnixDISA STIG Solaris 10 SPARC v2r4
GEN006571 - The file integrity tool must be configured to verify extended attributes - usedUnixDISA STIG Solaris 10 X86 v2r4
GEN006571 - The file integrity tool must be configured to verify extended attributes.UnixDISA STIG for Oracle Linux 5 v2r1
OL07-00-020029 - The Oracle Linux operating system must use a file integrity tool to verify correct operation of all security functions.UnixDISA Oracle Linux 7 STIG v3r3
OL07-00-020210 - The Oracle Linux operating system must enable SELinux.UnixDISA Oracle Linux 7 STIG v3r3
OL07-00-020220 - The Oracle Linux operating system must enable the SELinux targeted policy.UnixDISA Oracle Linux 7 STIG v3r3
OL08-00-010359 - The OL 8 operating system must use a file integrity tool to verify correct operation of all security functions.UnixDISA Oracle Linux 8 STIG v2r5
OL08-00-010450 - OL 8 must enable the SELinux targeted policy.UnixDISA Oracle Linux 8 STIG v2r5
OL09-00-000060 - OL 9 must use a Linux Security Module configured to enforce limits on system services.UnixDISA Oracle Linux 9 STIG v1r2
OL09-00-000065 - OL 9 must enable the SELinux targeted policy.UnixDISA Oracle Linux 9 STIG v1r2
OL09-00-000300 - OL 9 must have the Advanced Intrusion Detection Environment (AIDE) package installed.UnixDISA Oracle Linux 9 STIG v1r2
PHTN-30-000013 - The Photon operating system must have the auditd service running.UnixDISA STIG VMware vSphere 7.0 Photon OS v1r4
PHTN-67-000018 - The Photon operating system must have the auditd service running.UnixDISA STIG VMware vSphere 6.7 Photon OS v1r6
RHEL-06-000017 - The system must use a Linux Security Module at boot time.UnixDISA Red Hat Enterprise Linux 6 STIG v2r2
RHEL-07-020029 - The Red Hat Enterprise Linux operating system must use a file integrity tool to verify correct operation of all security functions.UnixDISA Red Hat Enterprise Linux 7 STIG v3r15
RHEL-07-020210 - The Red Hat Enterprise Linux operating system must enable SELinux.UnixDISA Red Hat Enterprise Linux 7 STIG v3r15
RHEL-07-020220 - The Red Hat Enterprise Linux operating system must enable the SELinux targeted policy.UnixDISA Red Hat Enterprise Linux 7 STIG v3r15