Ensure events that modify date and time information are collected – clock_settime
Details Capture events where the system date and/or time has been modified. The parameters in this section are set to...
- Home
- Security Hardening
- CIS Red Hat EL8 Server L2 V1.0.1
CIS Red Hat EL8 Server L2 V1.0.1
Ensure events that modify date and time information are collected – clock_settime (64-bit)
Details Capture events where the system date and/or time has been modified. The parameters in this section are set to...Ensure events that modify date and time information are collected – /etc/localtime
Details Capture events where the system date and/or time has been modified. The parameters in this section are set to...Ensure login and logout events are collected – auditctl /var/log/lastlog
Details Monitor login and logout events. The parameters below track changes to files associated with login/logout events. The file /var/log/lastlog...Ensure login and logout events are collected – auditctl /var/run/faillock
Details Monitor login and logout events. The parameters below track changes to files associated with login/logout events. The file /var/log/lastlog...Ensure login and logout events are collected – /var/log/lastlog
Details Monitor login and logout events. The parameters below track changes to files associated with login/logout events. The file /var/log/lastlog...Ensure login and logout events are collected – /var/run/faillock
Details Monitor login and logout events. The parameters below track changes to files associated with login/logout events. The file /var/log/lastlog...Ensure mounting of vFAT filesystems is limited – lsmod
Details The vFAT filesystem format is primarily used on older windows systems and portable USB drives or flash modules. It...Ensure mounting of vFAT filesystems is limited – modprobe
Details The vFAT filesystem format is primarily used on older windows systems and portable USB drives or flash modules. It...Ensure no unconfined services exist
Details Unconfined processes run in unconfined domains Rationale: For unconfined processes, SELinux policy rules are applied, but policy rules exist...