Ensure filesystem integrity is regularly checked
Details Periodic checking of the filesystem integrity is needed to detect changes to the filesystem. Rationale: Periodic file checking allows...
- Home
- Security Hardening
- CIS CentOS 6 Server L1 V3.0.0
CIS CentOS 6 Server L1 V3.0.0
Ensure gpgcheck is globally activated
Details The gpgcheck option, found in the main section of the /etc/yum.conf and individual /etc/yum/repos.d/* files determines if an RPM...Ensure GPG keys are configured
Details Most packages managers implement GPG key signing to verify package integrity during installation. Rationale: It is important to ensure...Ensure interactive boot is not enabled
Details Interactive boot allows console users to interactively select which services start on boot. The PROMPT option provides console users...Ensure mounting of cramfs filesystems is disabled – lsmod
Details The cramfs filesystem type is a compressed read-only Linux filesystem embedded in small footprint systems. A cramfs image can...Ensure mounting of cramfs filesystems is disabled – modprobe
Details The cramfs filesystem type is a compressed read-only Linux filesystem embedded in small footprint systems. A cramfs image can...Ensure mounting of freevxfs filesystems is disabled – lsmod
Details The freevxfs filesystem type is a free version of the Veritas type filesystem. This is the primary filesystem type...Ensure mounting of freevxfs filesystems is disabled – modprobe
Details The freevxfs filesystem type is a free version of the Veritas type filesystem. This is the primary filesystem type...Ensure mounting of hfs filesystems is disabled
Details The hfs filesystem type is a hierarchical filesystem that allows you to mount Mac OS filesystems. Rationale: Removing support...Ensure mounting of hfs filesystems is disabled – modprobe
Details The hfs filesystem type is a hierarchical filesystem that allows you to mount Mac OS filesystems. Rationale: Removing support...