Ensure GPG keys are configured
Details It is important to ensure that updates are obtained from a valid source to protect against spoofing that could...
- Home
- Security Hardening
- CIS Amazon Linux V2.1.0 L1
CIS Amazon Linux V2.1.0 L1
Ensure local login warning banner is configured properly – banner text
Details Warning messages inform users who are attempting to login to the system of their legal status regarding the system...Ensure message of the day is configured properly – banner text
Details Warning messages inform users who are attempting to login to the system of their legal status regarding the system...Ensure mounting of cramfs filesystems is disabled – /etc/modprobe.d/CIS.conf
Details Removing support for unneeded filesystem types reduces the local attack surface of the server. If this filesystem type is...Ensure mounting of cramfs filesystems is disabled – lsmod
Details The `cramfs` filesystem type is a compressed read-only Linux filesystem embedded in small footprint systems. A `cramfs` image can...Ensure mounting of FAT filesystems is disabled – /etc/modprobe.d/CIS.conf
Details Removing support for unneeded filesystem types reduces the local attack surface of the system. If this filesystem type is...Ensure mounting of FAT filesystems is disabled – lsmod
Details The `FAT` filesystem format is primarily used on older windows systems and portable USB drives or flash modules. It...Ensure mounting of freevxfs filesystems is disabled – /etc/modprobe.d/CIS.conf
Details Removing support for unneeded filesystem types reduces the local attack surface of the system. If this filesystem type is...Ensure mounting of freevxfs filesystems is disabled – lsmod
Details The `freevxfs` filesystem type is a free version of the Veritas type filesystem. This is the primary filesystem type...Ensure mounting of hfs filesystems is disabled – /etc/modprobe.d/CIS.conf
Details Removing support for unneeded filesystem types reduces the local attack surface of the system. If this filesystem type is...