Disable Automounting
Details autofs allows automatic mounting of devices, typically including CD/DVDs and USB drives. Note: This control should align with the...
- Home
- Security Hardening
- CIS Debian Family Workstation L2 V1.0.0
CIS Debian Family Workstation L2 V1.0.0
Disable IPv6 – grub.cfg
Details Although IPv6 has many advantages over IPv4, not all organizations have IPv6 or dual stack configurations implemented. Rationale: If...Disable IPv6 – sysctl all
Details Although IPv6 has many advantages over IPv4, not all organizations have IPv6 or dual stack configurations implemented. Rationale: If...Disable IPv6 – sysctl.conf all
Details Although IPv6 has many advantages over IPv4, not all organizations have IPv6 or dual stack configurations implemented. Rationale: If...Disable IPv6 – sysctl.conf default
Details Although IPv6 has many advantages over IPv4, not all organizations have IPv6 or dual stack configurations implemented. Rationale: If...Disable IPv6 – sysctl default
Details Although IPv6 has many advantages over IPv4, not all organizations have IPv6 or dual stack configurations implemented. Rationale: If...Disable USB Storage – lsmod
Details USB storage provides a means to transfer and store files insuring persistence and availability of the files independent of...Disable USB Storage – modprobe
Details USB storage provides a means to transfer and store files insuring persistence and availability of the files independent of...Ensure all AppArmor Profiles are enforcing – 0 processes are unconfined
Details AppArmor profiles define what resources applications are able to access. Rationale: Security configuration requirements vary from site to site....Ensure all AppArmor Profiles are enforcing – complain mode
Details AppArmor profiles define what resources applications are able to access. Rationale: Security configuration requirements vary from site to site....