Ensure /dev/shm is configured – fstab
Details /dev/shm is a traditional shared memory concept. One program will create a memory portion, which other processes (if permitted)...
- Home
- Security Hardening
- CIS SUSE Linux Enterprise Workstation 12 L1 V3.0.0
CIS SUSE Linux Enterprise Workstation 12 L1 V3.0.0
Ensure /dev/shm is configured – mount
Details /dev/shm is a traditional shared memory concept. One program will create a memory portion, which other processes (if permitted)...Ensure filesystem integrity is regularly checked – aidecheck.service
Details Periodic checking of the filesystem integrity is needed to detect changes to the filesystem. Note: The checking in this...Ensure filesystem integrity is regularly checked – aidecheck.timer
Details Periodic checking of the filesystem integrity is needed to detect changes to the filesystem. Note: The checking in this...Ensure filesystem integrity is regularly checked – cron
Details Periodic checking of the filesystem integrity is needed to detect changes to the filesystem. Note: The checking in this...Ensure gpgcheck is globally activated
Details The gpgcheck option, found in the main section of the /etc/zypp/zypp.conf and individual /etc/zypp/repos.d/*.repo files determines if an RPM...Ensure GPG keys are configured
Details Most packages managers implement GPG key signing to verify package integrity during installation. Rationale: It is important to ensure...Ensure message of the day is configured properly – banner text
Details The contents of the /etc/motd file are displayed to users after login and function as a message of the...Ensure message of the day is configured properly – mrsv
Details The contents of the /etc/motd file are displayed to users after login and function as a message of the...Ensure mounting of udf filesystems is disabled
Details The udf filesystem type is the universal disk format used to implement ISO/IEC 13346 and ECMA-167 specifications. This is...