Ensure system is disabled when audit logs are full – ‘space_left_action = email’ Details The auditd daemon can be configured to halt the system when the audit logs are full. Rationale: In high...
Ensure the SELinux mode is enforcing – config Details SELinux can run in one of three modes: disabled, permissive, or enforcing: Enforcing – Is the default, and recommended,...
Ensure the SELinux mode is enforcing – getenforce Details SELinux can run in one of three modes: disabled, permissive, or enforcing: Enforcing – Is the default, and recommended,...
Ensure /tmp is configured Details The /tmp directory is a world-writable directory used for temporary storage by all users and some applications. Rationale: Making...