Disable Automounting
Details autofs allows automatic mounting of devices, typically including CD/DVDs and USB drives. Notes: Additional methods of disabling a service...
- Home
- Security Hardening
- CIS SUSE Linux Enterprise 15 Server L1 V1.1.1
CIS SUSE Linux Enterprise 15 Server L1 V1.1.1
Ensure address space layout randomization (ASLR) is enabled – sysctl
Details Address space layout randomization (ASLR) is an exploit mitigation technique which randomly arranges the address space of key data...Ensure address space layout randomization (ASLR) is enabled – sysctl.conf
Details Address space layout randomization (ASLR) is an exploit mitigation technique which randomly arranges the address space of key data...Ensure AIDE is installed
Details AIDE takes a snapshot of filesystem state including modification times, permissions, and file hashes which can then be used...Ensure AppArmor is enabled in the bootloader configuration – apparmor=1
Details Configure AppArmor to be enabled at boot time and verify that it has not been overwritten by the bootloader...Ensure AppArmor is enabled in the bootloader configuration – security=apparmor
Details Configure AppArmor to be enabled at boot time and verify that it has not been overwritten by the bootloader...Ensure AppArmor is installed – apparmor-docs
Details AppArmor provides Mandatory Access Controls. Rationale: Without a Mandatory Access Control system installed only the default Discretionary Access Control...Ensure AppArmor is installed – apparmor-parser
Details AppArmor provides Mandatory Access Controls. Rationale: Without a Mandatory Access Control system installed only the default Discretionary Access Control...Ensure AppArmor is installed – apparmor-profiles
Details AppArmor provides Mandatory Access Controls. Rationale: Without a Mandatory Access Control system installed only the default Discretionary Access Control...Ensure AppArmor is installed – apparmor-utils
Details AppArmor provides Mandatory Access Controls. Rationale: Without a Mandatory Access Control system installed only the default Discretionary Access Control...