Ensure core dumps are restricted – storage
Details A core dump is the memory of an executable program. It is generally used to determine why a program...
- Home
- Security Hardening
- CIS Debian Family Workstation L1 V1.0.0
CIS Debian Family Workstation L1 V1.0.0
Ensure core dumps are restricted – sysctl
Details A core dump is the memory of an executable program. It is generally used to determine why a program...Ensure filesystem integrity is regularly checked
Details Periodic checking of the filesystem integrity is needed to detect changes to the filesystem. Notes: The checking in this...Ensure GPG keys are configured
Details Most packages managers implement GPG key signing to verify package integrity during installation. Rationale: It is important to ensure...Ensure mounting of cramfs filesystems is disabled – lsmod
Details The cramfs filesystem type is a compressed read-only Linux filesystem embedded in small footprint systems. A cramfs image can...Ensure mounting of cramfs filesystems is disabled – modprobe
Details The cramfs filesystem type is a compressed read-only Linux filesystem embedded in small footprint systems. A cramfs image can...Ensure mounting of freevxfs filesystems is disabled – lsmod
Details The freevxfs filesystem type is a free version of the Veritas type filesystem. This is the primary filesystem type...Ensure mounting of freevxfs filesystems is disabled – modprobe
Details The freevxfs filesystem type is a free version of the Veritas type filesystem. This is the primary filesystem type...Ensure mounting of hfs filesystems is disabled – lsmod
Details The hfs filesystem type is a hierarchical filesystem that allows you to mount Mac OS filesystems. Rationale: Removing support...Ensure mounting of hfs filesystems is disabled – modprobe
Details The hfs filesystem type is a hierarchical filesystem that allows you to mount Mac OS filesystems. Rationale: Removing support...