Ensure GPG keys are configured
Details Most packages managers implement GPG key signing to verify package integrity during installation. Rationale: It is important to ensure...
- Home
- Security Hardening
- CIS Amazon Linux 2 STIG V1.0.0 L1
CIS Amazon Linux 2 STIG V1.0.0 L1
Ensure local login warning banner is configured properly – msrv
Details The contents of the /etc/issue file are displayed to users prior to login for local terminals. Unix-based systems have...Ensure message of the day is configured properly – banner_check
Details The contents of the /etc/motd file are displayed to users after login and function as a message of the...Ensure message of the day is configured properly – msrv
Details The contents of the /etc/motd file are displayed to users after login and function as a message of the...Ensure mounting of cramfs filesystems is disabled – lsmod
Details The cramfs filesystem type is a compressed read-only Linux filesystem embedded in small footprint systems. A cramfs image can...Ensure mounting of cramfs filesystems is disabled – modprobe
Details The cramfs filesystem type is a compressed read-only Linux filesystem embedded in small footprint systems. A cramfs image can...Ensure mounting of hfs filesystems is disabled – lsmod
Details The hfs filesystem type is a hierarchical filesystem that allows you to mount Mac OS filesystems. Rationale: Removing support...Ensure mounting of hfs filesystems is disabled – modprobe
Details The hfs filesystem type is a hierarchical filesystem that allows you to mount Mac OS filesystems. Rationale: Removing support...Ensure mounting of hfsplus filesystems is disabled – lsmod
Details The hfsplus filesystem type is a hierarchical filesystem designed to replace hfs that allows you to mount Mac OS...Ensure mounting of squashfs filesystems is disabled – lsmod
Details The squashfs filesystem type is a compressed read-only Linux filesystem embedded in small footprint systems (similar to cramfs )....