Definition of CIS benchmark for SUSE Linux Enterprise 15 for sle15

based on https://www.cisecurity.org/cis-benchmarks/#suse_linux

reload_dconf_db: Reload Dconf database

Description: None

Levels:

Automated: yes

Selections:

1.1.1.1: Ensure mounting of squashfs filesystems is disabled (Automated)

Description: None

Levels:

Automated: yes

Selections:

1.1.1.2: Ensure mounting of udf filesystems is disabled (Automated)

Description: None

Levels:

Automated: yes

Selections:

1.1.1.3: Ensure mounting of FAT filesystems is limited (Automated)

Description: None

Levels:

Automated: yes

Selections:

1.1.2: Ensure /tmp is configured (Automated)

Description: None

Levels:

Automated: yes

Selections:

1.1.3: Ensure noexec option set on /tmp partition (Automated)

Description: None

Levels:

Automated: yes

Selections:

1.1.4: Ensure nodev option set on /tmp partition (Automated)

Description: None

Levels:

Automated: yes

Selections:

1.1.5: Ensure nosuid option set on /tmp partition (Automated)

Description: None

Levels:

Automated: yes

Selections:

1.1.6: Ensure /dev/shm is configured (Automated)

Description: None

Levels:

Automated: yes

Selections:

1.1.7: Ensure noexec option set on /dev/shm partition (Automated)

Description: None

Levels:

Automated: yes

Selections:

1.1.8: Ensure nodev option set on /dev/shm partition (Automated)

Description: None

Levels:

Automated: yes

Selections:

1.1.9: Ensure nosuid option set on /dev/shm partition (Automated)

Description: None

Levels:

Automated: yes

Selections:

1.1.10: Ensure separate partition exists for /var (Automated)

Description: None

Levels:

Automated: yes

Selections:

1.1.11: Ensure separate partition exists for /var/tmp (Automated)

Description: None

Levels:

Automated: yes

Selections:

1.1.12: Ensure noexec option set on /var/tmp partition (Automated)

Description: None

Levels:

Automated: yes

Selections:

1.1.13: Ensure nodev option set on /var/tmp partition (Automated)

Description: None

Levels:

Automated: yes

Selections:

1.1.14: Ensure nosuid option set on /var/tmp partition (Automated)

Description: None

Levels:

Automated: yes

Selections:

1.1.15: Ensure separate partition exists for /var/log (Automated)

Description: None

Levels:

Automated: yes

Selections:

1.1.16: Ensure separate partition exists for /var/log/audit (Automated)

Description: None

Levels:

Automated: yes

Selections:

1.1.17: Ensure separate partition exists for /home (Automated)

Description: None

Levels:

Automated: yes

Selections:

1.1.18: Ensure nodev option set on /home partition (Automated)

Description: None

Levels:

Automated: yes

Selections:

1.1.19: Ensure noexec option set on removable media partitions (Manual)

Description: None

Levels:

Automated: yes

Selections:

1.1.20: Ensure nodev option set on removable media partitions (Manual)

Description: None

Levels:

Automated: yes

Selections:

1.1.21: Ensure nosuid option set on removable media partitions (Manual)

Description: None

Levels:

Automated: yes

Selections:

1.1.22: Ensure sticky bit is set on all world-writable directories (Automated)

Description: None

Levels:

Automated: yes

Selections:

1.1.23: Disable Automounting (Automated)

Description: None

Levels:

Automated: yes

Selections:

1.2.1: Ensure GPG keys are configured (Manual)

Description: None

Levels:

Automated: no

Selections:

1.2.2: Ensure package manager repositories are configured (Manual)

Description: None

Levels:

Automated: no

Selections:

1.2.3: Ensure gpgcheck is globally activated (Automated)

Description: None

Levels:

Automated: yes

Selections:

1.3.1: Ensure sudo is installed (Automated)

Description: None

Levels:

Automated: yes

Selections:

1.3.2: Ensure sudo commands use pty (Automated)

Description: None

Levels:

Automated: yes

Selections:

1.3.3: Ensure sudo log file exists (Automated)

Description: None

Levels:

Automated: yes

Selections:

1.4.1: Ensure AIDE is installed (Automated)

Description: None

Levels:

Automated: yes

Selections:

1.4.2: Ensure filesystem integrity is regularly checked (Automated)

Description: None

Levels:

Automated: yes

Selections:

1.5.1: Ensure bootloader password is set (Automated)

Description: None

Levels:

Automated: yes

Selections:

1.5.2: Ensure permissions on bootloader config are configured (Automated)

Description: None

Levels:

Automated: yes

Selections:

1.5.3: Ensure authentication required for single user mode (Automated)

Description: None

Levels:

Automated: yes

Selections:

1.6.1: Ensure core dumps are restricted (Automated)

Description: None

Levels:

Automated: yes

Selections:

1.6.2: Ensure XD/NX support is enabled (Automated)

Description: None

Levels:

Automated: partially

Selections:

1.6.3: Ensure address space layout randomization (ASLR) is enabled (Automated)

Description: None

Levels:

Automated: yes

Selections:

1.6.4: Ensure prelink is not installed (Automated)

Description: None

Levels:

Automated: yes

Selections:

1.7.1.1: Ensure AppArmor is installed (Automated)

Description: None

Levels:

Automated: yes

Selections:

1.7.1.2: Ensure AppArmor is enabled in the bootloader configuration (Automated)

Description: None

Levels:

Automated: yes

Selections:

1.7.1.3: Ensure all AppArmor Profiles are in enforce or complain mode (Automated)

Description: None

Levels:

Automated: yes

Selections:

1.7.1.4: Ensure all AppArmor Profiles are enforcing (Automated)

Description: None

Levels:

Automated: yes

Selections:

1.8.1.1: Ensure message of the day is configured properly (Automated)

Description: None

Levels:

Automated: yes

Selections:

1.8.1.2: Ensure local login warning banner is configured properly (Automated)

Description: None

Levels:

Automated: yes

Selections:

1.8.1.3: Ensure remote login warning banner is configured properly (Automated)

Description: None

Levels:

Automated: yes

Selections:

1.8.1.4: Ensure permissions on /etc/motd are configured (Automated)

Description: None

Levels:

Automated: yes

Selections:

1.8.1.5: Ensure permissions on /etc/issue are configured (Automated)

Description: None

Levels:

Automated: yes

Selections:

1.8.1.6: Ensure permissions on /etc/issue.net are configured (Automated)

Description: None

Levels:

Automated: yes

Selections:

1.9: Ensure updates, patches, and additional security software are installed (Manual)

Description: None

Levels:

Automated: no

No rules selected

1.1: Ensure GDM login banner is configured (Automated)

Description: None

Levels:

Automated: yes

Selections:

2.1.1: Ensure xinetd is not installed (Automated)

Description: None

Levels:

Automated: yes

Selections:

2.2.1.1: Ensure time synchronization is in use (Automated)

Description: None

Levels:

Automated: yes

Selections:

2.2.1.2: Ensure systemd-timesyncd is configured (Manual)

Description: None

Levels:

Automated: yes

Selections:

2.2.1.3: Ensure chrony is configured (Automated)

Description: None

Levels:

Automated: yes

Selections:

2.2.2: Ensure X11 Server components are not installed (Automated)

Description: None

Levels:

Automated: yes

Selections:

2.2.3: Ensure Avahi Server is not installed (Automated)

Description: None

Levels:

Automated: yes

Selections:

2.2.4: Ensure CUPS is not installed (Automated)

Description: None

Levels:

Automated: yes

Selections:

2.2.5: Ensure DHCP Server is not installed (Automated)

Description: None

Levels:

Automated: yes

Selections:

2.2.6: Ensure LDAP server is not installed (Automated)

Description: None

Levels:

Automated: yes

Selections:

2.2.7: Ensure nfs-utils is not installed or the nfs-server service is masked (Automated)

Description: None

Levels:

Automated: yes

Selections:

2.2.8: Ensure rpcbind is not installed or the rpcbind services are masked (Automated)

Description: None

Levels:

Automated: yes

Selections:

2.2.9: Ensure DNS Server is not installed (Automated)

Description: None

Levels:

Automated: yes

Selections:

2.2.10: Ensure FTP Server is not installed (Automated)

Description: None

Levels:

Automated: yes

Selections:

2.2.11: Ensure HTTP server is not installed (Automated)

Description: None

Levels:

Automated: partially

Selections:

2.2.12: Ensure IMAP and POP3 server is not installed (Automated)

Description: None

Levels:

Automated: yes

Selections:

2.2.13: Ensure Samba is not installed (Automated)

Description: None

Levels:

Automated: yes

Selections:

2.2.14: Ensure HTTP Proxy Server is not installed (Automated)

Description: None

Levels:

Automated: yes

Selections:

2.2.15: Ensure net-snmp is not installed (Automated)

Description: None

Levels:

Automated: yes

Selections:

2.2.16: Ensure mail transfer agent is configured for local-only mode (Automated)

Description: None

Levels:

Automated: yes

Selections:

2.2.17: Ensure rsync is not installed or the rsyncd service is masked (Automated)

Description: None

Levels:

Automated: yes

Selections:

2.2.18: Ensure NIS server is not installed (Automated)

Description: None

Levels:

Automated: yes

Selections:

2.2.19: Ensure telnet-server is not installed (Automated)

Description: None

Levels:

Automated: yes

Selections:

2.3.1: Ensure NIS Client is not installed (Automated)

Description: None

Levels:

Automated: yes

Selections:

2.3.2: Ensure rsh client is not installed (Automated)

Description: None

Levels:

Automated: yes

Selections:

2.3.3: Ensure talk client is not installed (Automated)

Description: None

Levels:

Automated: yes

Selections:

2.3.4: Ensure telnet client is not installed (Automated)

Description: None

Levels:

Automated: yes

Selections:

2.3.5: Ensure LDAP client is not installed (Automated)

Description: None

Levels:

Automated: yes

Selections:

2.4: Ensure nonessential services are removed or masked (Manual)

Description: None

Levels:

Automated: no

No rules selected

3.1.1: Disable IPv6 (Automated)

Description: None

Levels:

Automated: yes

Selections:

3.1.2: Ensure wireless interfaces are disabled (Manual)

Description: None

Levels:

Automated: yes

Selections:

3.2.1: Ensure IP forwarding is disabled (Automated)

Description: None

Levels:

Automated: yes

Selections:

3.2.2: Ensure packet redirect sending is disabled (Automated)

Description: None

Levels:

Automated: yes

Selections:

3.3.1: Ensure source routed packets are not accepted (Automated)

Description: None

Levels:

Automated: yes

Selections:

3.3.2: Ensure ICMP redirects are not accepted (Automated)

Description: None

Levels:

Automated: yes

Selections:

3.3.3: Ensure secure ICMP redirects are not accepted (Automated)

Description: None

Levels:

Automated: yes

Selections:

3.3.4: Ensure suspicious packets are logged (Automated)

Description: None

Levels:

Automated: yes

Selections:

3.3.5: Ensure broadcast ICMP requests are ignored (Automated)

Description: None

Levels:

Automated: yes

Selections:

3.3.6: Ensure bogus ICMP responses are ignored (Automated)

Description: None

Levels:

Automated: yes

Selections:

3.3.7: Ensure Reverse Path Filtering is enabled (Automated)

Description: None

Levels:

Automated: yes

Selections:

3.3.8: Ensure TCP SYN Cookies is enabled (Automated)

Description: None

Levels:

Automated: yes

Selections:

3.3.9: Ensure IPv6 router advertisements are not accepted (Automated)

Description: None

Levels:

Automated: yes

Selections:

3.4.1: Ensure DCCP is disabled (Automated)

Description: None

Levels:

Automated: yes

Selections:

3.4.2: Ensure SCTP is disabled (Automated)

Description: None

Levels:

Automated: yes

Selections:

3.5.1.1: Ensure FirewallD is installed (Automated)

Description: None

Levels:

Automated: yes

Selections:

3.5.1.2: Ensure nftables is not installed or stopped and masked (Automated)

Description: None

Levels:

Automated: yes

Selections:

3.5.1.3: Ensure firewalld service is enabled and running (Automated)

Description: None

Levels:

Automated: yes

Selections:

3.5.1.4: Ensure default zone is set (Automated)

Description: None

Levels:

Automated: yes

Selections:

3.5.1.5: Ensure network interfaces are assigned to appropriate zone (Manual)

Description: None

Levels:

Automated: no

Selections:

3.5.1.6: Ensure unnecessary services and ports are not accepted (Manual)

Description: None

Levels:

Automated: no

Selections:

3.5.2.1: Ensure nftables is installed (Automated)

Description: None

Levels:

Automated: yes

Selections:

3.5.2.2: Ensure firewalld is not installed or stopped and masked (Automated)

Description: None

Levels:

Automated: yes

Selections:

3.5.2.3: Ensure iptables are flushed (Manual)

Description: None

Levels:

Automated: no

Selections:

3.5.2.4: Ensure a table exists (Automated)

Description: None

Levels:

Automated: yes

Selections:

3.5.2.5: Ensure base chains exist (Automated)

Description: None

Levels:

Automated: yes

Selections:

3.5.2.6: Ensure loopback traffic is configured (Automated)

Description: None

Levels:

Automated: no

Selections:

3.5.2.7: Ensure outbound and established connections are configured (Manual)

Description: None

Levels:

Automated: no

Selections:

3.5.2.8: Ensure default deny firewall policy (Automated)

Description: None

Levels:

Automated: yes

Selections:

3.5.2.9: Ensure nftables service is enabled (Automated)

Description: None

Levels:

Automated: yes

Selections:

3.5.2.10: Ensure nftables rules are permanent (Automated)

Description: None

Levels:

Automated: yes

Selections:

3.5.3.1.1: Ensure iptables package is installed (Automated)

Description: None

Levels:

Automated: yes

Selections:

3.5.3.1.2: Ensure nftables is not installed (Automated)

Description: None

Levels:

Automated: no

No rules selected

3.5.3.1.3: Ensure firewalld is not installed or stopped and masked (Automated)

Description: None

Levels:

Automated: yes

Selections:

3.5.3.2.1: Ensure default deny firewall policy (Automated)

Description: None

Levels:

Automated: partially

Selections:

3.5.3.2.2: Ensure loopback traffic is configured (Automated)

Description: None

Levels:

Automated: yes

Selections:

3.5.3.2.3: Ensure outbound and established connections are configured (Manual)

Description: None

Levels:

Automated: no

Selections:

3.5.3.2.4: Ensure firewall rules exist for all open ports (Automated)

Description: None

Levels:

Automated: no

Selections:

3.5.3.3.1: Ensure IPv6 default deny firewall policy (Automated)

Description: None

Levels:

Automated: partially

Selections:

3.5.3.3.2: Ensure IPv6 loopback traffic is configured (Automated)

Description: None

Levels:

Automated: yes

Selections:

3.5.3.3.3: Ensure IPv6 outbound and established connections are configured (Manual)

Description: None

Levels:

Automated: no

Selections:

3.5.3.3.4: Ensure IPv6 firewall rules exist for all open ports (Manual)

Description: None

Levels:

Automated: no

No rules selected

4.1.1.1: Ensure auditd is installed (Automated)

Description: None

Levels:

Automated: yes

Selections:

4.1.1.2: Ensure auditd service is enabled and running (Automated)

Description: None

Levels:

Automated: yes

Selections:

4.1.1.3: Ensure auditing for processes that start prior to auditd is enabled (Automated)

Description: None

Levels:

Automated: yes

Selections:

4.1.2.1: Ensure audit log storage size is configured (Automated)

Description: None

Levels:

Automated: yes

Selections:

4.1.2.2: Ensure audit logs are not automatically deleted (Automated)

Description: None

Levels:

Automated: yes

Selections:

4.1.2.3: Ensure system is disabled when audit logs are full (Automated)

Description: None

Levels:

Automated: yes

Selections:

4.1.2.4: Ensure audit_backlog_limit is sufficient (Automated)

Description: None

Levels:

Automated: yes

Selections:

4.1.3: Ensure events that modify date and time information are collected (Automated)

Description: None

Levels:

Automated: partially

Selections:

4.1.4: Ensure events that modify user/group information are collected (Automated)

Description: None

Levels:

Automated: yes

Selections:

4.1.5: Ensure events that modify the system's network environment are collected (Automated)

Description: None

Levels:

Automated: yes

Selections:

4.1.6: Ensure events that modify the system's Mandatory Access Controls are collected (Automated)

Description: None

Levels:

Automated: yes

Selections:

4.1.7: Ensure login and logout events are collected (Automated)

Description: None

Levels:

Automated: yes

Selections:

4.1.8: Ensure session initiation information is collected (Automated)

Description: None

Levels:

Automated: yes

Selections:

4.1.9: Ensure discretionary access control permission modification events are collected (Automated)

Description: None

Levels:

Automated: yes

Selections:

4.1.10: Ensure unsuccessful unauthorized file access attempts are collected (Automated)

Description: None

Levels:

Automated: yes

Selections:

4.1.11: Ensure use of privileged commands is collected (Automated)

Description: None

Levels:

Automated: no

No rules selected

4.1.12: Ensure successful file system mounts are collected (Automated)

Description: None

Levels:

Automated: yes

Selections:

4.1.13: Ensure file deletion events by users are collected (Automated)

Description: None

Levels:

Automated: yes

Selections:

4.1.14: Ensure changes to system administration scope (sudoers) is collected (Automated)

Description: None

Levels:

Automated: yes

Selections:

4.1.15: Ensure system administrator actions (sudolog) are collected (Automated)

Description: None

Levels:

Automated: yes

Selections:

4.1.16: Ensure kernel module loading and unloading is collected (Automated)

Description: None

Levels:

Automated: yes

Selections:

4.1.17: Ensure the audit configuration is immutable (Automated)

Description: None

Levels:

Automated: yes

Selections:

4.2.1.1: Ensure rsyslog is installed (Automated)

Description: None

Levels:

Automated: yes

Selections:

4.2.1.2: Ensure rsyslog Service is enabled and running (Automated)

Description: None

Levels:

Automated: yes

Selections:

4.2.1.3: Ensure rsyslog default file permissions configured (Automated)

Description: None

Levels:

Automated: yes

Selections:

4.2.1.4: Ensure logging is configured (Manual)

Description: None

Levels:

Automated: yes

Selections:

4.2.1.5: Ensure rsyslog is configured to send logs to a remote log host (Automated)

Description: None

Levels:

Automated: no

Selections:

4.2.1.6: Ensure remote rsyslog messages are only accepted on designated log hosts. (Manual)

Description: None

Levels:

Automated: no

No rules selected

4.2.2.1: Ensure journald is configured to send logs to rsyslog (Automated)

Description: None

Levels:

Automated: yes

Selections:

4.2.2.2: Ensure journald is configured to compress large log files (Automated)

Description: None

Levels:

Automated: yes

Selections:

4.2.2.3: Ensure journald is configured to write logfiles to persistent disk (Automated)

Description: None

Levels:

Automated: yes

Selections:

4.2.3: Ensure permissions on all logfiles are configured (Automated)

Description: None

Levels:

Automated: partially

Selections:

4.2.4: Ensure logrotate is configured (Manual)

Description: None

Levels:

Automated: yes

Selections:

5.1.1: Ensure cron daemon is enabled and running (Automated)

Description: None

Levels:

Automated: yes

Selections:

5.1.2: Ensure permissions on /etc/crontab are configured (Automated)

Description: None

Levels:

Automated: yes

Selections:

5.1.3: Ensure permissions on /etc/cron.hourly are configured (Automated)

Description: None

Levels:

Automated: yes

Selections:

5.1.4: Ensure permissions on /etc/cron.daily are configured (Automated)

Description: None

Levels:

Automated: yes

Selections:

5.1.5: Ensure permissions on /etc/cron.weekly are configured (Automated)

Description: None

Levels:

Automated: yes

Selections:

5.1.6: Ensure permissions on /etc/cron.monthly are configured (Automated)

Description: None

Levels:

Automated: yes

Selections:

5.1.7: Ensure permissions on /etc/cron.d are configured (Automated)

Description: None

Levels:

Automated: yes

Selections:

5.1.8: Ensure cron is restricted to authorized users (Automated)

Description: None

Levels:

Automated: yes

Selections:

5.1.9: Ensure at is restricted to authorized users (Automated)

Description: None

Levels:

Automated: yes

Selections:

5.2.1: Ensure permissions on /etc/ssh/sshd_config are configured (Automated)

Description: None

Levels:

Automated: yes

Selections:

5.2.2: Ensure permissions on SSH private host key files are configured (Automated)

Description: None

Levels:

Automated: partially

Selections:

5.2.3: Ensure permissions on SSH public host key files are configured (Automated)

Description: None

Levels:

Automated: partially

Selections:

5.2.4: Ensure SSH access is limited (Automated)

Description: None

Levels:

Automated: yes

Selections:

5.2.5: Ensure SSH LogLevel is appropriate (Automated)

Description: None

Levels:

Automated: yes

Selections:

5.2.6: Ensure SSH X11 forwarding is disabled (Automated)

Description: None

Levels:

Automated: yes

Selections:

5.2.7: Ensure SSH MaxAuthTries is set to 4 or less (Automated)

Description: None

Levels:

Automated: yes

Selections:

5.2.8: Ensure SSH IgnoreRhosts is enabled (Automated)

Description: None

Levels:

Automated: yes

Selections:

5.2.9: Ensure SSH HostbasedAuthentication is disabled (Automated)

Description: None

Levels:

Automated: yes

Selections:

5.2.10: Ensure SSH root login is disabled (Automated)

Description: None

Levels:

Automated: yes

Selections:

5.2.11: Ensure SSH PermitEmptyPasswords is disabled (Automated)

Description: None

Levels:

Automated: yes

Selections:

5.2.12: Ensure SSH PermitUserEnvironment is disabled (Automated)

Description: None

Levels:

Automated: yes

Selections:

5.2.13: Ensure only strong Ciphers are used (Automated)

Description: None

Levels:

Automated: yes

Selections:

5.2.14: Ensure only strong MAC algorithms are used (Automated)

Description: None

Levels:

Automated: yes

Selections:

5.2.15: Ensure only strong Key Exchange algorithms are used (Automated)

Description: None

Levels:

Automated: yes

Selections:

5.2.16: Ensure SSH Idle Timeout Interval is configured (Automated)

Description: None

Levels:

Automated: yes

Selections:

5.2.17: Ensure SSH LoginGraceTime is set to one minute or less (Automated)

Description: None

Levels:

Automated: yes

Selections:

5.2.18: Ensure SSH warning banner is configured (Automated)

Description: None

Levels:

Automated: yes

Selections:

5.2.19: Ensure SSH PAM is enabled (Automated)

Description: None

Levels:

Automated: yes

Selections:

5.2.20: Ensure SSH AllowTcpForwarding is disabled (Automated)

Description: None

Levels:

Automated: yes

Selections:

5.2.21: Ensure SSH MaxStartups is configured (Automated)

Description: None

Levels:

Automated: yes

Selections:

5.2.22: Ensure SSH MaxSessions is limited (Automated)

Description: None

Levels:

Automated: yes

Selections:

5.3.1: Ensure password creation requirements are configured (Automated)

Description: None

Levels:

Automated: yes

Selections:

5.3.2: Ensure lockout for failed password attempts is configured (Automated)

Description: None

Levels:

Automated: yes

Selections:

5.3.3: Ensure password reuse is limited (Automated)

Description: None

Levels:

Automated: yes

Selections:

5.4.1.1: Ensure password hashing algorithm is SHA-512 (Automated)

Description: None

Levels:

Automated: yes

Selections:

5.4.1.2: Ensure password expiration is 365 days or less (Automated)

Description: None

Levels:

Automated: yes

Selections:

5.4.1.3: Ensure minimum days between password changes is configured (Automated)

Description: None

Levels:

Automated: yes

Selections:

5.4.1.4: Ensure password expiration warning days is 7 or more (Automated)

Description: None

Levels:

Automated: yes

Selections:

5.4.1.5: Ensure inactive password lock is 30 days or less (Automated)

Description: None

Levels:

Automated: yes

Selections:

5.4.1.6: Ensure all users last password change date is in the past (Automated)

Description: None

Levels:

Automated: partially

Selections:

5.4.2: Ensure system accounts are secured (Automated)

Description: None

Levels:

Automated: partially

Selections:

5.4.3: Ensure default group for the root account is GID 0 (Automated)

Description: None

Levels:

Automated: yes

Selections:

5.4.4: Ensure default user shell timeout is configured (Automated)

Description: None

Levels:

Automated: partially

Selections:

5.4.5: Ensure default user umask is configured (Automated)

Description: None

Levels:

Automated: partially

Selections:

5.5: Ensure root login is restricted to system console (Manual)

Description: None

Levels:

Automated: yes

Selections:

5.6: Ensure access to the su command is restricted (Automated)

Description: None

Levels:

Automated: partially

Selections:

6.1.1: Audit system file permissions (Manual)

Description: None

Levels:

Automated: no

No rules selected

6.1.2: Ensure permissions on /etc/passwd are configured (Automated)

Description: None

Levels:

Automated: yes

Selections:

6.1.3: Ensure permissions on /etc/shadow are configured (Automated)

Description: None

Levels:

Automated: yes

Selections:

6.1.4: Ensure permissions on /etc/group are configured (Automated)

Description: None

Levels:

Automated: yes

Selections:

6.1.5: Ensure permissions on /etc/passwd- are configured (Automated)

Description: None

Levels:

Automated: yes

Selections:

6.1.6: Ensure permissions on /etc/shadow- are configured (Automated)

Description: None

Levels:

Automated: yes

Selections:

6.1.7: Ensure permissions on /etc/group- are configured (Automated)

Description: None

Levels:

Automated: yes

Selections:

6.1.8: Ensure no world writable files exist (Automated)

Description: None

Levels:

Automated: yes

Selections:

6.1.9: Ensure no unowned files or directories exist (Automated)

Description: None

Levels:

Automated: yes

Selections:

6.1.10: Ensure no ungrouped files or directories exist (Automated)

Description: None

Levels:

Automated: yes

Selections:

6.1.11: Audit SUID executables (Manual)

Description: None

Levels:

Automated: no

No rules selected

6.1.12: Audit SGID executables (Manual)

Description: None

Levels:

Automated: no

No rules selected

6.2.1: Ensure accounts in /etc/passwd use shadowed passwords (Automated)

Description: None

Levels:

Automated: yes

Selections:

6.2.2: Ensure /etc/shadow password fields are not empty (Automated)

Description: None

Levels:

Automated: yes

Selections:

6.2.3: Ensure root is the only UID 0 account (Automated)

Description: None

Levels:

Automated: yes

Selections:

6.2.4: Ensure root PATH Integrity (Automated)

Description: None

Levels:

Automated: yes

Selections:

6.2.5: Ensure all users' home directories exist (Automated)

Description: None

Levels:

Automated: yes

Selections:

6.2.6: Ensure users' home directories permissions are 750 or more restrictive (Automated)

Description: None

Levels:

Automated: yes

Selections:

6.2.7: Ensure users own their home directories (Automated)

Description: None

Levels:

Automated: no

No rules selected

6.2.8: Ensure users' dot files are not group or world writable (Automated)

Description: None

Levels:

Automated: no

No rules selected

6.2.9: Ensure no users have .forward files (Automated)

Description: None

Levels:

Automated: yes

Selections:

6.2.10: Ensure no users have .netrc files (Automated)

Description: None

Levels:

Automated: yes

Selections:

6.2.11: Ensure users' .netrc Files are not group or world accessible (Automated)

Description: None

Levels:

Automated: yes

Selections:

6.2.12: Ensure no users have .rhosts files (Automated)

Description: None

Levels:

Automated: no

No rules selected

6.2.13: Ensure all groups in /etc/passwd exist in /etc/group (Automated)

Description: None

Levels:

Automated: yes

Selections:

6.2.14: Ensure no duplicate UIDs exist (Automated)

Description: None

Levels:

Automated: yes

Selections:

6.2.15: Ensure no duplicate GIDs exist (Automated)

Description: None

Levels:

Automated: yes

Selections:

6.2.16: Ensure no duplicate user names exist (Automated)

Description: None

Levels:

Automated: yes

Selections:

6.2.17: Ensure no duplicate group names exist (Automated)

Description: None

Levels:

Automated: yes

Selections:

6.2.18: Ensure shadow group is empty (Automated)

Description: None

Levels:

Automated: yes

Selections: