Disable Automounting
Details autofs allows automatic mounting of devices, typically including CD/DVDs and USB drives. Notes: Additional methods of disabling a service...
- Home
- Security Hardening
- CIS SUSE Linux Enterprise Server 12 L1 V3.0.0
CIS SUSE Linux Enterprise Server 12 L1 V3.0.0
Ensure address space layout randomization (ASLR) is enabled – sysctl
Details Address space layout randomization (ASLR) is an exploit mitigation technique which randomly arranges the address space of key data...Ensure address space layout randomization (ASLR) is enabled – sysctl.conf
Details Address space layout randomization (ASLR) is an exploit mitigation technique which randomly arranges the address space of key data...Ensure AIDE is installed
Details AIDE takes a snapshot of filesystem state including modification times, permissions, and file hashes which can then be used...Ensure all AppArmor Profiles are in enforce or complain mode – processes unconfined
Details AppArmor profiles define what resources applications are able to access. Rationale: Security configuration requirements vary from site to site....Ensure all AppArmor Profiles are in enforce or complain mode – profiles loaded
Details AppArmor profiles define what resources applications are able to access. Rationale: Security configuration requirements vary from site to site....Ensure AppArmor is enabled in the bootloader configuration – apparmor=1
Details Configure AppArmor to be enabled at boot time and verify that it has not been overwritten by the bootloader...Ensure AppArmor is enabled in the bootloader configuration – security=apparmor
Details Configure AppArmor to be enabled at boot time and verify that it has not been overwritten by the bootloader...Ensure AppArmor is installed – apparmor-parser
Details AppArmor provides Mandatory Access Controls. Rationale: Without a Mandatory Access Control system installed only the default Discretionary Access Control...Ensure AppArmor is installed – apparmor-profiles
Details AppArmor provides Mandatory Access Controls. Rationale: Without a Mandatory Access Control system installed only the default Discretionary Access Control...