Ensure separate partition exists for /var
Details The /var directory is used by daemons and other system services to temporarily store dynamic data. Some directories created...
- Home
- Security Hardening
- CIS Debian 9 Workstation L2 V1.0.1
CIS Debian 9 Workstation L2 V1.0.1
Ensure separate partition exists for /var/log
Details The /var/log directory is used by system services to store log data. Rationale: There are two important reasons to...Ensure separate partition exists for /var/log/audit
Details The auditing daemon, auditd, stores log data in the /var/log/audit directory. Rationale: There are two important reasons to ensure...Ensure separate partition exists for /var/tmp
Details The /var/tmp directory is a world-writable directory used for temporary storage by all users and some applications. Rationale: Since...Ensure system is disabled when audit logs are full – action_mail_acct
Details The auditd daemon can be configured to halt the system when the audit logs are full. Rationale: In high...Ensure system is disabled when audit logs are full – admin_space_left_action
Details The auditd daemon can be configured to halt the system when the audit logs are full. Rationale: In high...Ensure system is disabled when audit logs are full – space_left_action
Details The auditd daemon can be configured to halt the system when the audit logs are full. Rationale: In high...Ensure the SELinux state is enforcing – /etc/selinux/config
Details Set SELinux to enable when the system is booted. Rationale: SELinux must be enabled at boot time in to...Ensure the SELinux state is enforcing – sestatus
Details Set SELinux to enable when the system is booted. Rationale: SELinux must be enabled at boot time in to...Ensure wireless interfaces are disabled
Details Wireless networking is used when wired networks are unavailable. Debian contains a wireless tool kit to allow system administrators...