Ensure SETroubleshoot is not installed
Details The SETroubleshoot service is an unnecessary daemon to have running on a server, especially if X Windows is disabled....
- Home
- Security Hardening
- CIS Amazon Linux V2.1.0 L2
CIS Amazon Linux V2.1.0 L2
Ensure system is disabled when audit logs are full – ‘action_mail_acct is configured’
Details In high security contexts, the risk of detecting unauthorized access or nonrepudiation exceeds the benefit of the system’s availability....Ensure system is disabled when audit logs are full – ‘admin_space_left_action’
Details In high security contexts, the risk of detecting unauthorized access or nonrepudiation exceeds the benefit of the system’s availability....Ensure system is disabled when audit logs are full – ‘space_left_action is configured’
Details In high security contexts, the risk of detecting unauthorized access or nonrepudiation exceeds the benefit of the system’s availability....Ensure the MCS Translation Service (mcstrans) is not installed
Details Since this service is not used very often, remove it to reduce the amount of potentially vulnerable code running...Ensure the SELinux state is enforcing
Details SELinux must be enabled at boot time in to ensure that the controls it provides are in effect at...