Activate AppArmor – ‘0 processes unconfined’
Details AppArmor provides a Mandatory Access Control (MAC) system that greatly augments the default Discretionary Access Control (DAC) model. *Rationale*...
- Home
- Security Hardening
- CIS Ubuntu 12.04 LTS Benchmark L2 V1.1.0
CIS Ubuntu 12.04 LTS Benchmark L2 V1.1.0
Activate AppArmor – ‘0 profiles in complain mode’
Details AppArmor provides a Mandatory Access Control (MAC) system that greatly augments the default Discretionary Access Control (DAC) model. *Rationale*...Activate AppArmor – ‘Profiles are loaded’ – Review
Details AppArmor provides a Mandatory Access Control (MAC) system that greatly augments the default Discretionary Access Control (DAC) model. *Rationale*...Collect Discretionary Access Control Permission Modification Events- ’32bit chmod/fchmod/fchmodat’
Details Monitor changes to file permissions, attributes, ownership and group. The parameters in this section track changes for system calls...Collect Discretionary Access Control Permission Modification Events- ’32bit chown/fchown/fchownat/lchown’
Details Monitor changes to file permissions, attributes, ownership and group. The parameters in this section track changes for system calls...Collect Discretionary Access Control Permission Modification Events- ’32bit setxattr’
Details Monitor changes to file permissions, attributes, ownership and group. The parameters in this section track changes for system calls...Collect Discretionary Access Control Permission Modification Events- ’64bit chmod/fchmod/fchmodat’
Details Monitor changes to file permissions, attributes, ownership and group. The parameters in this section track changes for system calls...Collect Discretionary Access Control Permission Modification Events- ’64bit chown/fchown/fchownat/lchown’
Details Monitor changes to file permissions, attributes, ownership and group. The parameters in this section track changes for system calls...Collect Discretionary Access Control Permission Modification Events- ’64bit setxattr’
Details Monitor changes to file permissions, attributes, ownership and group. The parameters in this section track changes for system calls...Collect Login and Logout Events- ‘/var/log/faillog’
Details Monitor login and logout events. The parameters below track changes to files associated with login/logout events. The file /var/log/faillog...