Create Separate Partition for /var Details The /var directory is used by daemons and other system services to temporarily store dynamic data. Some directories created...
Create Separate Partition for /var/log Details The /var/log directory is used by system services to store log data . *Rationale* There are two important reasons...
Create Separate Partition for /var/log/audit Details The auditing daemon, auditd, stores log data in the /var/log/audit directory. *Rationale* There are two important reasons to ensure...
Disable Automounting Details autofs allows automatic mounting of devices, typically including CD/DVDs and USB drives. *Rationale* With automounting enabled anyone with physical...
Disable Prelink Details The prelinking feature changes binaries in an attempt to decrease their startup time. *Rationale* The prelinking feature can interfere...
Enable Randomized Virtual Memory Region Placement Details Set the system flag to force randomized virtual memory region placement. *Rationale* Randomly placing virtual memory regions will make...
Enable XD/NX Support on 32-bit x86 Systems Details 32 bit OS not installed. Check was not performed. Recent processors in the x86 family support the ability to...
Ensure Avahi Server is not enabled Details Avahi is a free zeroconf implementation, including a system for multicast DNS/DNS-SD service discovery. Avahi allows programs to publish...
Ensure chargen is not enabled Details chargen is a network service that responds with 0 to 512 ASCII characters for each connection it receives. This...
Ensure daytime is not enabled Details daytime is a network service that responds with the server’s current date and time. This service is intended for...