Disable Automounting Details autofs allows automatic mounting of devices, typically including CD/DVDs and USB drives. Notes: Additional methods of disabling a service...
Disable USB Storage – lsmod Details USB storage provides a means to transfer and store files insuring persistence and availability of the files independent of...
Disable USB Storage – modprobe Details USB storage provides a means to transfer and store files insuring persistence and availability of the files independent of...
Ensure AIDE is installed Details AIDE takes a snapshot of filesystem state including modification times, permissions, and file hashes which can then be used...
Ensure authentication required for single user mode – /usr/lib/systemd/system/emergency.service Details Single user mode (rescue mode) is used for recovery when the system detects an issue during boot or by...
Ensure authentication required for single user mode – /usr/lib/systemd/system/rescue.service Details Single user mode (rescue mode) is used for recovery when the system detects an issue during boot or by...
Ensure bootloader password is set – GRUB2_PASSWORD Details Setting the boot loader password will require that anyone rebooting the system must enter a password before being able...
Ensure bootloader password is set – password_pbkdf2 Details Setting the boot loader password will require that anyone rebooting the system must enter a password before being able...
Ensure bootloader password is set – superusers Details Setting the boot loader password will require that anyone rebooting the system must enter a password before being able...
Ensure core dumps are restricted – /etc/security/limits.d/* Details A core dump is the memory of an executable program. It is generally used to determine why a program...