Disable IPv6
Details Although IPv6 has many advantages over IPv4, not all organizations have IPv6 or dual stack configurations implemented. Rationale: If...
- Home
- Security Hardening
- CIS Red Hat EL8 Server L2 V1.0.1
CIS Red Hat EL8 Server L2 V1.0.1
Ensure audit_backlog_limit is sufficient
Details The backlog limit has a default setting of 64 Rationale: during boot if audit=1, then the backlog will hold...Ensure auditd is installed – ‘audit’
Details auditd is the userspace component to the Linux Auditing System. It’s responsible for writing audit records to the disk...Ensure auditd is installed – ‘audit-libs’
Details auditd is the userspace component to the Linux Auditing System. It’s responsible for writing audit records to the disk...Ensure auditd service is enabled
Details Turn on the auditd daemon to record system events. Rationale: The capturing of system events provides system administrators with...Ensure auditing for processes that start prior to auditd is enabled
Details Configure grub2 so that processes that are capable of being audited can be audited even if they start up...Ensure audit logs are not automatically deleted
Details The max_log_file_action setting determines how to handle the audit log file reaching the max file size. A value of...Ensure audit log storage size is configured
Details Configure the maximum size of the audit log file. Once the log reaches the maximum size, it will be...Ensure changes to system administration scope (sudoers) is collected – auditctl sudoers
Details Monitor scope changes for system administrators. If the system has been properly configured to force system administrators to log...Ensure changes to system administration scope (sudoers) is collected – auditctl sudoers.d
Details Monitor scope changes for system administrators. If the system has been properly configured to force system administrators to log...