Ensure system-wide crypto policy is FUTURE or FIPS
Details The system-wide crypto-policies followed by the crypto core components allow consistently deprecating and disabling algorithms system-wide. The individual policy...
- Home
- Security Hardening
- CIS Red Hat EL8 Server L2 V1.0.1
CIS Red Hat EL8 Server L2 V1.0.1
Ensure the MCS Translation Service (mcstrans) is not installed
Details The mcstransd daemon provides category label information to client processes requesting information. The label translations are defined in /etc/selinux/targeted/setrans.conf...Ensure the SELinux state is enforcing
Details Set SELinux to enable when the system is booted. Rationale: SELinux must be enabled at boot time to ensure...Ensure TIPC is disabled
Details The Transparent Inter-Process Communication (TIPC) protocol is designed to provide communication between cluster nodes. Rationale: If the protocol is...