Ensure nosuid option set on removable media partitions
Details The nosuid mount option specifies that the filesystem cannot contain setuid files. Rationale: Setting this option on a file...
- Home
- Security Hardening
- CIS SUSE Linux Enterprise Workstation 12 L1 V3.0.0
CIS SUSE Linux Enterprise Workstation 12 L1 V3.0.0
Ensure nosuid option set on /tmp partition
Details The nosuid mount option specifies that the filesystem cannot contain setuid files. Rationale: Since the /tmp filesystem is only...Ensure nosuid option set on /var/tmp partition
Details The nosuid mount option specifies that the filesystem cannot contain setuid files. Rationale: Since the /var/tmp filesystem is only...Ensure package manager repositories are configured
Details Systems need to have package manager repositories configured to ensure they receive the latest patches and updates. Rationale: If...Ensure permissions on bootloader config are configured
Details The grub configuration file contains information on boot settings and passwords for unlocking boot options. The grub2 configuration is...Ensure prelink is disabled
Details prelink is a program that modifies ELF shared libraries and ELF dynamically linked binaries in such a way that...Ensure sticky bit is set on all world-writable directories
Details Setting the sticky bit on world writable directories prevents users from deleting or renaming files in that directory that...Ensure /tmp is configured – config check
Details The /tmp directory is a world-writable directory used for temporary storage by all users and some applications. Notes: If...Ensure /tmp is configured – mount
Details The /tmp directory is a world-writable directory used for temporary storage by all users and some applications. Notes: If...Ensure XD/NX support is enabled
Details Recent processors in the x86 family support the ability to prevent code execution on a per memory page basis....