Ensure session initiation information is collected – auditctl wtmp
Details Monitor session initiation events. The parameters in this section track changes to the files associated with session events. The...
- Home
- Security Hardening
- CIS Oracle Linux 8 Workstation L2 V1.0.1
CIS Oracle Linux 8 Workstation L2 V1.0.1
Ensure session initiation information is collected – btmp
Details Monitor session initiation events. The parameters in this section track changes to the files associated with session events. The...Ensure session initiation information is collected – utmp
Details Monitor session initiation events. The parameters in this section track changes to the files associated with session events. The...Ensure session initiation information is collected – wtmp
Details Monitor session initiation events. The parameters in this section track changes to the files associated with session events. The...Ensure system is disabled when audit logs are full – action_mail_acct
Details The auditd daemon can be configured to halt the system when the audit logs are full. Rationale: In high...Ensure system is disabled when audit logs are full – admin_space_left_action
Details The auditd daemon can be configured to halt the system when the audit logs are full. Rationale: In high...Ensure system is disabled when audit logs are full – space_left_action
Details The auditd daemon can be configured to halt the system when the audit logs are full. Rationale: In high...Ensure system-wide crypto policy is FUTURE or FIPS
Details The system-wide crypto-policies followed by the crypto core components allow consistently deprecating and disabling algorithms system-wide. The individual policy...Ensure the MCS Translation Service (mcstrans) is not installed
Details The mcstransd daemon provides category label information to client processes requesting information. The label translations are defined in /etc/selinux/targeted/setrans.conf...Ensure the SELinux state is enforcing
Details Set SELinux to enable when the system is booted. Rationale: SELinux must be enabled at boot time to ensure...