Ensure all AppArmor Profiles are enforcing – complain mode
Details AppArmor profiles define what resources applications are able to access. Security configuration requirements vary from site to site. Some...
- Home
- Security Hardening
- CIS SUSE Linux Enterprise Server 11 L2 V2.1.0
CIS SUSE Linux Enterprise Server 11 L2 V2.1.0
Ensure all AppArmor Profiles are enforcing – processes unconfined
Details AppArmor profiles define what resources applications are able to access. Security configuration requirements vary from site to site. Some...Ensure all AppArmor Profiles are enforcing – profiles loaded
Details AppArmor profiles define what resources applications are able to access. Security configuration requirements vary from site to site. Some...Ensure AppArmor is not disabled in bootloader configuration
Details Configure AppArmor to be enabled at boot time and verify that it has not been overwritten by the bootloader...Ensure auditd service is enabled
Details Turn on the auditd daemon to record system events. The capturing of system events provides system administrators with information...Ensure auditing for processes that start prior to auditd is enabled
Details Configure grub so that processes that are capable of being audited can be audited even if they start up...Ensure audit logs are not automatically deleted
Details The max_log_file_action setting determines how to handle the audit log file reaching the max file size. A value of...Ensure audit log storage size is configured
Details Configure the maximum size of the audit log file. Once the log reaches the maximum size, it will be...Ensure events that modify date and time information are collected – auditctl b32 adjtimex
Details Capture events where the system date and/or time has been modified. The parameters in this section are set to...Ensure events that modify date and time information are collected – auditctl b32 clock_settime
Details Capture events where the system date and/or time has been modified. The parameters in this section are set to...