Detections
Analytics

CSCv7|9.2

Title

Ensure Only Approved Ports, Protocols and Services Are Running

Description

Ensure that only network ports, protocols, and services listening on a system with validated business needs, are running on each system.

Reference Item Details

Category: Limitation and Control of Network Ports, Protocols, and Services

Audit Items

View all Reference Audit Items

NamePluginAudit Name
1.1.1.1 Ensure cramfs kernel module is not availableUnixCIS Red Hat Enterprise Linux 7 v4.0.0 L1 Server
1.1.1.1 Ensure cramfs kernel module is not availableUnixCIS Oracle Linux 7 v4.0.0 L1 Workstation
1.1.1.1 Ensure cramfs kernel module is not availableUnixCIS CentOS Linux 7 v4.0.0 L1 Workstation
1.1.1.1 Ensure cramfs kernel module is not availableUnixCIS Red Hat Enterprise Linux 7 v4.0.0 L1 Workstation
1.1.1.1 Ensure cramfs kernel module is not availableUnixCIS Red Hat EL8 Workstation L1 v3.0.0
1.1.1.1 Ensure cramfs kernel module is not availableUnixCIS AlmaLinux OS 8 Workstation L1 v3.0.0
1.1.1.1 Ensure cramfs kernel module is not availableUnixCIS Oracle Linux 8 Server L1 v3.0.0
1.1.1.1 Ensure cramfs kernel module is not availableUnixCIS Rocky Linux 8 Server L1 v2.0.0
1.1.1.1 Ensure cramfs kernel module is not availableUnixCIS AlmaLinux OS 8 Server L1 v3.0.0
1.1.1.1 Ensure cramfs kernel module is not availableUnixCIS Rocky Linux 8 Workstation L1 v2.0.0
1.1.1.1 Ensure cramfs kernel module is not availableUnixCIS Red Hat EL8 Server L1 v3.0.0
1.1.1.1 Ensure cramfs kernel module is not availableUnixCIS Oracle Linux 7 v4.0.0 L1 Server
1.1.1.1 Ensure cramfs kernel module is not availableUnixCIS Amazon Linux 2 v3.0.0 L1
1.1.1.1 Ensure cramfs kernel module is not availableUnixCIS CentOS Linux 7 v4.0.0 L1 Server
1.1.1.1 Ensure cramfs kernel module is not availableUnixCIS Oracle Linux 8 Workstation L1 v3.0.0
1.1.1.1 Ensure mounting of cramfs filesystems is disabledUnixCIS Ubuntu Linux 20.04 LTS Workstation L1 v2.0.1
1.1.1.1 Ensure mounting of cramfs filesystems is disabledUnixCIS Debian Linux 11 Server L1 v1.0.0
1.1.1.1 Ensure mounting of cramfs filesystems is disabledUnixCIS Debian 10 Server L1 v2.0.0
1.1.1.1 Ensure mounting of cramfs filesystems is disabledUnixCIS Debian Linux 11 Workstation L1 v1.0.0
1.1.1.1 Ensure mounting of cramfs filesystems is disabledUnixCIS Ubuntu Linux 22.04 LTS Server L1 v1.0.0
1.1.1.1 Ensure mounting of cramfs filesystems is disabledUnixCIS Debian 10 Workstation L1 v2.0.0
1.1.1.1 Ensure mounting of cramfs filesystems is disabledUnixCIS Ubuntu Linux 20.04 LTS Server L1 v2.0.1
1.1.1.1 Ensure mounting of cramfs filesystems is disabledUnixCIS Ubuntu Linux 22.04 LTS Workstation L1 v1.0.0
1.1.1.1 Ensure mounting of cramfs filesystems is disabled - blacklistUnixCIS CentOS Linux 8 Server L1 v2.0.0
1.1.1.1 Ensure mounting of cramfs filesystems is disabled - blacklistUnixCIS Fedora 28 Family Linux Server L1 v2.0.0
1.1.1.1 Ensure mounting of cramfs filesystems is disabled - blacklistUnixCIS Fedora 28 Family Linux Workstation L1 v2.0.0
1.1.1.1 Ensure mounting of cramfs filesystems is disabled - blacklistUnixCIS CentOS Linux 8 Workstation L1 v2.0.0
1.1.1.1 Ensure mounting of cramfs filesystems is disabled - lsmodUnixCIS CentOS Linux 8 Workstation L1 v2.0.0
1.1.1.1 Ensure mounting of cramfs filesystems is disabled - lsmodUnixCIS Fedora 28 Family Linux Workstation L1 v2.0.0
1.1.1.1 Ensure mounting of cramfs filesystems is disabled - lsmodUnixCIS CentOS Linux 8 Server L1 v2.0.0
1.1.1.1 Ensure mounting of cramfs filesystems is disabled - lsmodUnixCIS Fedora 28 Family Linux Server L1 v2.0.0
1.1.1.1 Ensure mounting of cramfs filesystems is disabled - lsmodUnixCIS Ubuntu Linux 22.04 LTS Workstation L1 v1.0.0
1.1.1.1 Ensure mounting of cramfs filesystems is disabled - modprobeUnixCIS Fedora 28 Family Linux Workstation L1 v2.0.0
1.1.1.1 Ensure mounting of cramfs filesystems is disabled - modprobeUnixCIS Fedora 28 Family Linux Server L1 v2.0.0
1.1.1.1 Ensure mounting of cramfs filesystems is disabled - modprobeUnixCIS CentOS Linux 8 Workstation L1 v2.0.0
1.1.1.1 Ensure mounting of cramfs filesystems is disabled - modprobeUnixCIS CentOS Linux 8 Server L1 v2.0.0
1.1.1.1 Ensure mounting of squashfs filesystems is disabledUnixCIS Red Hat EL9 Workstation L2 v1.0.0
1.1.1.1 Ensure mounting of squashfs filesystems is disabledUnixCIS Rocky Linux 9 Workstation L2 v1.0.0
1.1.1.1 Ensure mounting of squashfs filesystems is disabledUnixCIS Red Hat EL9 Server L2 v1.0.0
1.1.1.1 Ensure mounting of squashfs filesystems is disabledUnixCIS AlmaLinux OS 9 Workstation L2 v1.0.0
1.1.1.1 Ensure mounting of squashfs filesystems is disabledUnixCIS Oracle Linux 9 Workstation L2 v1.0.0
1.1.1.1 Ensure mounting of squashfs filesystems is disabledUnixCIS Rocky Linux 9 Server L2 v1.0.0
1.1.1.1 Ensure mounting of squashfs filesystems is disabledUnixCIS Oracle Linux 9 Server L2 v1.0.0
1.1.1.1 Ensure mounting of squashfs filesystems is disabledUnixCIS Amazon Linux 2023 Server L2 v1.0.0
1.1.1.1 Ensure mounting of squashfs filesystems is disabledUnixCIS AlmaLinux OS 9 Server L2 v1.0.0
1.1.1.2 Ensure freevxfs kernel module is not availableUnixCIS Oracle Linux 7 v4.0.0 L1 Server
1.1.1.2 Ensure freevxfs kernel module is not availableUnixCIS Oracle Linux 7 v4.0.0 L1 Workstation
1.1.1.2 Ensure freevxfs kernel module is not availableUnixCIS CentOS Linux 7 v4.0.0 L1 Workstation
1.1.1.2 Ensure freevxfs kernel module is not availableUnixCIS CentOS Linux 7 v4.0.0 L1 Server
1.1.1.2 Ensure freevxfs kernel module is not availableUnixCIS Red Hat Enterprise Linux 7 v4.0.0 L1 Workstation