Disable Automounting
Details autofs allows automatic mounting of devices, typically including CD/DVDs and USB drives. Rationale: With automounting enabled anyone with physical...
- Home
- Security Hardening
- CIS Red Hat EL7 Server L1 V3.1.1
CIS Red Hat EL7 Server L1 V3.1.1
Disable the rhnsd Daemon
Details The rhnsd daemon polls the Red Hat Network web site for scheduled actions and, if there are, executes those...Disable USB Storage – lsmod
Details USB storage provides a means to transfer and store files insuring persistence and availability of the files independent of...Disable USB Storage – modprobe
Details USB storage provides a means to transfer and store files insuring persistence and availability of the files independent of...Ensure address space layout randomization (ASLR) is enabled – sysctl
Details Address space layout randomization (ASLR) is an exploit mitigation technique which randomly arranges the address space of key data...Ensure address space layout randomization (ASLR) is enabled – sysctl.conf sysctl.d
Details Address space layout randomization (ASLR) is an exploit mitigation technique which randomly arranges the address space of key data...Ensure AIDE is installed
Details AIDE takes a snapshot of filesystem state including modification times, permissions, and file hashes which can then be used...Ensure authentication required for single user mode – emergency.service
Details Single user mode (rescue mode) is used for recovery when the system detects an issue during boot or by...Ensure authentication required for single user mode – rescue.service
Details Single user mode (rescue mode) is used for recovery when the system detects an issue during boot or by...Ensure bootloader password is set
Details Setting the boot loader password will require that anyone rebooting the system must enter a password before being able...