Ensure events that modify date and time information are collected – /etc/localtime
Details Capture events where the system date and/or time has been modified. The parameters in this section are set to...
- Home
- Security Hardening
- CIS Red Hat Enterprise Linux 7 STIG V2.0.0 L2 Server
CIS Red Hat Enterprise Linux 7 STIG V2.0.0 L2 Server
Ensure events that modify the system’s Mandatory Access Controls are collected – auditctl /etc/selinux/
Details Monitor SELinux mandatory access controls. The parameters below monitor any write access (potential additional, deletion or modification of files...Ensure events that modify the system’s Mandatory Access Controls are collected – auditctl /usr/share/selinux/
Details Monitor SELinux mandatory access controls. The parameters below monitor any write access (potential additional, deletion or modification of files...Ensure events that modify the system’s Mandatory Access Controls are collected – /etc/selinux/
Details Monitor SELinux mandatory access controls. The parameters below monitor any write access (potential additional, deletion or modification of files...Ensure events that modify the system’s Mandatory Access Controls are collected – /usr/share/selinux/
Details Monitor SELinux mandatory access controls. The parameters below monitor any write access (potential additional, deletion or modification of files...Ensure GNOME Display Manager is removed
Details The GNOME Display Manager (GDM) is a program that manages graphical display servers and handles graphical user logins. Rationale:...Ensure mounting of squashfs filesystems is disabled – lsmod
Details The squashfs filesystem type is a compressed read-only Linux filesystem embedded in small footprint systems (similar to cramfs )....Ensure mounting of squashfs filesystems is disabled – modprobe
Details The squashfs filesystem type is a compressed read-only Linux filesystem embedded in small footprint systems (similar to cramfs )....Ensure Red Hat Subscription Manager connection is configured
Details Systems need to be registered with the Red Hat Subscription Manager (RHSM) to receive patch updates. This is usually...Ensure SCTP is disabled – lsmod
Details The Stream Control Transmission Protocol (SCTP) is a transport layer protocol used to support message oriented communication, with several...