Ensure mounting of FAT filesystems is disabled – /etc/modprobe.d/*
Details The FAT filesystem format is primarily used on older windows systems and portable USB drives or flash modules. It...
- Home
- Security Hardening
- CIS SUSE Linux Enterprise Server 11 L2 V2.1.0
CIS SUSE Linux Enterprise Server 11 L2 V2.1.0
Ensure mounting of FAT filesystems is disabled – lsmod
Details The FAT filesystem format is primarily used on older windows systems and portable USB drives or flash modules. It...Ensure mounting of FAT filesystems is disabled – modprobe
Details The FAT filesystem format is primarily used on older windows systems and portable USB drives or flash modules. It...Ensure no unconfined daemons exist
Details Daemons that are not defined in SELinux policy will inherit the security context of their parent process. Since daemons...Ensure SELinux is not disabled in bootloader configuration – enforcing
Details Configure SELINUX to be enabled at boot time and verify that it has not been overwritten by the grub...Ensure SELinux is not disabled in bootloader configuration – selinux
Details Configure SELINUX to be enabled at boot time and verify that it has not been overwritten by the grub...Ensure SELinux or AppArmor are installed
Details SELinux and AppArmor provide Mandatory Access Controls. Without a Mandatory Access Control system installed only the default Discretionary Access...Ensure SELinux policy is configured
Details Configure SELinux to meet or exceed the default targeted policy, which constrains daemons and system software only. Security configuration...Ensure separate partition exists for /home
Details The /home directory is used to support disk storage needs of local users. If the system is intended to...Ensure separate partition exists for /tmp
Details The /tmp directory is a world-writable directory used for temporary storage by all users and some applications. Since the...