Ensure system is disabled when audit logs are full – ‘action_mail_acct = root’
Details The auditd daemon can be configured to halt the system when the audit logs are full. Rationale: In high...
- Home
- Security Hardening
- CIS CentOS 6 Workstation L2 V3.0.0
CIS CentOS 6 Workstation L2 V3.0.0
Ensure system is disabled when audit logs are full – ‘admin_space_left_action = halt’
Details The auditd daemon can be configured to halt the system when the audit logs are full. Rationale: In high...Ensure system is disabled when audit logs are full – ‘space_left_action = email’
Details The auditd daemon can be configured to halt the system when the audit logs are full. Rationale: In high...Ensure the SELinux mode is enforcing – config
Details SELinux can run in one of three modes: disabled, permissive, or enforcing: Enforcing – Is the default, and recommended,...Ensure the SELinux mode is enforcing – getenforce
Details SELinux can run in one of three modes: disabled, permissive, or enforcing: Enforcing – Is the default, and recommended,...Ensure /tmp is configured
Details The /tmp directory is a world-writable directory used for temporary storage by all users and some applications. Rationale: Making...Ensure wireless interfaces are disabled
Details Wireless networking is used when wired networks are unavailable. Rationale: If wireless is not to be used, wireless devices...