Ensure number of concurrent sessions is limited
Details The operating system must limit the number of concurrent sessions to 10 for all accounts and/or account types. Rationale:...
- Home
- Security Hardening
- CIS Red Hat Enterprise Linux 7 STIG V2.0.0 STIG
CIS Red Hat Enterprise Linux 7 STIG V2.0.0 STIG
Ensure removal of software components after update
Details The operating system must remove all software components after updated versions have been installed. Rationale: Previous versions of software...Ensure separate partition exists for /var
Details The /var directory is used by daemons and other system services to temporarily store dynamic data. Some directories created...Ensure separate partition exists for /var/log/audit
Details The auditing daemon, auditd , stores log data in the /var/log/audit directory. Rationale: There are two important reasons to...Ensure software packages have been digitally signed by a Certificate Authority (CA) – CA that is recognized and approved by the organization.
Details The operating system must prevent the installation of software, patches, service packs, device drivers, or operating system components of...Ensure the Ctrl-Alt-Delete key sequence is disabled – inactive
Details The operating system must be configured so that the user will be prompted when Ctrl-Alt-Delete key sequence is entered....Ensure the Ctrl-Alt-Delete key sequence is disabled – target
Details The operating system must be configured so that the user will be prompted when Ctrl-Alt-Delete key sequence is entered....Ensure the version of the operating system is an active vendor supported release
Details The operating system must be a vendor supported release Rationale: An operating system release is considered ‘supported’ if the...Ensure /tmp is configured – or equivalent.
Details The /tmp directory is a world-writable directory used for temporary storage by all users and some applications. Rationale: Making...Ensure version 7.2 or newer booted with a BIOS have a unique name for the grub superusers account
Details The Linux operating systems version 7.2 or newer booted with a BIOS must have a unique name for the...