Ensure events that modify date and time information are collected – ‘clock_settime – 64bit’
Details Capture events where the system date and/or time has been modified. The parameters in this section are set to...
- Home
- Security Hardening
- CIS Distribution Independent Linux Server L2 V2.0.0
CIS Distribution Independent Linux Server L2 V2.0.0
Ensure events that modify date and time information are collected – ‘/etc/localtime’
Details Capture events where the system date and/or time has been modified. The parameters in this section are set to...Ensure mounting of FAT filesystems is limited – lsmod
Details The FAT filesystem format is primarily used on older windows systems and portable USB drives or flash modules. It...Ensure mounting of FAT filesystems is limited – modprobe
Details The FAT filesystem format is primarily used on older windows systems and portable USB drives or flash modules. It...Ensure mounting of FAT filesystems is limited – vfat fstab
Details The FAT filesystem format is primarily used on older windows systems and portable USB drives or flash modules. It...Ensure no unconfined daemons exist
Details Daemons that are not defined in SELinux policy will inherit the security context of their parent process. Rationale: Since...Ensure RDS is disabled – lsmod
Details The Reliable Datagram Sockets (RDS) protocol is a transport layer protocol designed to provide low-latency, high-bandwidth communications between cluster...Ensure RDS is disabled – modprobe
Details The Reliable Datagram Sockets (RDS) protocol is a transport layer protocol designed to provide low-latency, high-bandwidth communications between cluster...Ensure SCTP is disabled – lsmod
Details The Stream Control Transmission Protocol (SCTP) is a transport layer protocol used to support message oriented communication, with several...Ensure SCTP is disabled – modprobe
Details The Stream Control Transmission Protocol (SCTP) is a transport layer protocol used to support message oriented communication, with several...