Ensure login and logout events are collected – faillock
Details Monitor login and logout events. The parameters below track changes to files associated with login/logout events. The file /var/log/lastlog...
- Home
- Security Hardening
- CIS CentOS Linux 8 Workstation L2 V1.0.1
CIS CentOS Linux 8 Workstation L2 V1.0.1
Ensure login and logout events are collected – lastlog
Details Monitor login and logout events. The parameters below track changes to files associated with login/logout events. The file /var/log/lastlog...Ensure mounting of vFAT filesystems is limited – /etc/fstab
Details The vFAT filesystem format is primarily used on older windows systems and portable USB drives or flash modules. It...Ensure mounting of vFAT filesystems is limited – lsmod
Details The vFAT filesystem format is primarily used on older windows systems and portable USB drives or flash modules. It...Ensure mounting of vFAT filesystems is limited – modprobe
Details The vFAT filesystem format is primarily used on older windows systems and portable USB drives or flash modules. It...Ensure no unconfined services exist
Details Unconfined processes run in unconfined domains Rationale: For unconfined processes, SELinux policy rules are applied, but policy rules exist...Ensure RDS is disabled – lsmod
Details The Reliable Datagram Sockets (RDS) protocol is a transport layer protocol designed to provide low-latency, high-bandwidth communications between cluster...Ensure RDS is disabled – modprobe
Details The Reliable Datagram Sockets (RDS) protocol is a transport layer protocol designed to provide low-latency, high-bandwidth communications between cluster...Ensure SCTP is disabled – lsmod
Details The Stream Control Transmission Protocol (SCTP) is a transport layer protocol used to support message oriented communication, with several...Ensure SCTP is disabled – modprobe
Details The Stream Control Transmission Protocol (SCTP) is a transport layer protocol used to support message oriented communication, with several...