Ensure bootloader password is set – superusers grub
Details Setting the boot loader password will require that anyone rebooting the system must enter a password before being able...
- Home
- Security Hardening
- CIS Red Hat Enterprise Linux 7 STIG V2.0.0 STIG
CIS Red Hat Enterprise Linux 7 STIG V2.0.0 STIG
Ensure DNS is servers are configured – immutable
Details The operating systems that are using DNS resolution, must have at least two name servers configured. Rationale: To provide...Ensure DNS is servers are configured – nameserver 1
Details The operating systems that are using DNS resolution, must have at least two name servers configured. Rationale: To provide...Ensure DNS is servers are configured – nameserver 2
Details The operating systems that are using DNS resolution, must have at least two name servers configured. Rationale: To provide...Ensure DNS is servers are configured – no dns
Details The operating systems that are using DNS resolution, must have at least two name servers configured. Rationale: To provide...Ensure filesystem integrity is regularly checked – aide
Details Periodic checking of the filesystem integrity is needed to detect changes to the filesystem. Rationale: Periodic file checking allows...Ensure filesystem integrity is regularly checked – cron
Details Periodic checking of the filesystem integrity is needed to detect changes to the filesystem. Rationale: Periodic file checking allows...Ensure filesystem integrity is regularly checked – mail
Details Periodic checking of the filesystem integrity is needed to detect changes to the filesystem. Rationale: Periodic file checking allows...Ensure gpgcheck is globally activated – CA that is recognized and approved by the organization.
Details The gpgcheck option, found in the main section of the /etc/yum.conf and individual /etc/yum/repos.d/*.repo files determines if an RPM...Ensure kernel core dumps are disabled.
Details The operating system must disable Kernel core dumps unless needed. Rationale: Kernel core dumps may contain the full contents...