Ensure core dumps are restricted – hard core (limits.conf/limits.d)
Details A core dump is the memory of an executable program. It is generally used to determine why a program...
- Home
- Security Hardening
- CIS Aliyun Linux 2 L1 V1.0.0
CIS Aliyun Linux 2 L1 V1.0.0
Ensure core dumps are restricted – sysctl
Details A core dump is the memory of an executable program. It is generally used to determine why a program...Ensure CUPS is not enabled
Details The Common Unix Print System (CUPS) provides the ability to print to both local and network printers. A system...Ensure DHCP Server is not enabled
Details The Dynamic Host Configuration Protocol (DHCP) is a service that allows machines to be dynamically assigned IP addresses. Rationale:...Ensure DHCP Server is not enabled – status
Details The Dynamic Host Configuration Protocol (DHCP) is a service that allows machines to be dynamically assigned IP addresses. Rationale:...Ensure filesystem integrity is regularly checked
Details Periodic checking of the filesystem integrity is needed to detect changes to the filesystem. Rationale: Periodic file checking allows...Ensure gpgcheck is globally activated
Details The gpgcheck option, found in the main section of the /etc/yum.conf and individual /etc/yum/repos.d/* files determines if an RPM...Ensure GPG keys are configured
Details Most packages managers implement GPG key signing to verify package integrity during installation. Rationale: It is important to ensure...Ensure local login warning banner is configured properly – banner check
Details The contents of the /etc/issue file are displayed to users prior to login for local terminals. Unix-based systems have...Ensure local login warning banner is configured properly – msrv
Details The contents of the /etc/issue file are displayed to users prior to login for local terminals. Unix-based systems have...