Ensure nosuid option set on removable media partitions Details The nosuid mount option specifies that the filesystem cannot contain setuid files. Setting this option on a file system...
Ensure nosuid option set on /run/shm partition Details The nosuid mount option specifies that the filesystem cannot contain setuid files. Setting this option on a file system...
Ensure nosuid option set on /tmp partition Details The nosuid mount option specifies that the filesystem cannot contain setuid files. Since the /tmp filesystem is only intended...
Ensure nosuid option set on /var/tmp partition Details The nosuid mount option specifies that the filesystem cannot contain setuid files. Since the /var/tmp filesystem is only intended...
Ensure package manager repositories are configured Details Systems need to have package manager repositories configured to ensure they receive the latest patches and updates. If a...
Ensure permissions on bootloader config are configured Details The grub configuration file contains information on boot settings and passwords for unlocking boot options. The grub configuration is...
Ensure permissions on /etc/issue are configured Details The contents of the /etc/issue file are displayed to users prior to login for local terminals. If the /etc/issue...
Ensure permissions on /etc/issue.net are configured Details The contents of the /etc/issue.net file are displayed to users prior to login for remote connections from configured services....
Ensure permissions on /etc/motd are configured Details The contents of the /etc/motd file are displayed to users after login and function as a message of the...
Ensure prelink is disabled Details prelink is a program that modifies ELF shared libraries and ELF dynamically linked binaries in such a way that...