Restrict Core Dumps – ‘hard core 0’
Details A core dump is the memory of an executable program. It is generally used to determine why a program...
- Home
- Security Hardening
- CIS Ubuntu 12.04 LTS Benchmark L1 V1.1.0
CIS Ubuntu 12.04 LTS Benchmark L1 V1.1.0
Restrict Core Dumps – whoopsie
Details A core dump is the memory of an executable program. It is generally used to determine why a program...Set Boot Loader Password – password
Details Setting the boot loader password will require that anyone rebooting the system must enter a password before being able...Set Boot Loader Password – set superusers
Details Setting the boot loader password will require that anyone rebooting the system must enter a password before being able...Set nodev option for /tmp Partition
Details The nodev mount option specifies that the filesystem cannot contain special devices. *Rationale* Since the /tmp filesystem is not...Set noexec option for /tmp Partition
Details The noexec mount option specifies that the filesystem cannot contain executable binaries. *Rationale* Since the /tmp filesystem is only...Set nosuid option for /tmp Partition
Details The nosuid mount option specifies that the filesystem cannot contain set userid files. *Rationale* Since the /tmp filesystem is...Set Permissions on bootloader config
Details Set permission on the your boot loaders config file to read and write for root only. *Rationale* Setting the...Set Sticky Bit on All World-Writable Directories
Details Setting the sticky bit on world writable directories prevents users from deleting or renaming files in that directory that...Set User/Group Owner on bootloader config
Details Set the owner and group of your boot loaders config file to the root user. These instructions default to...