Ensure separate partition exists for /home Details The /home directory is used to support disk storage needs of local users. If the system is intended to...
Ensure separate partition exists for /tmp Details The /tmp directory is a world-writable directory used for temporary storage by all users and some applications. Since the...
Ensure separate partition exists for /var Details The /var directory is used by daemons and other system services to temporarily store dynamic data. Some directories created...
Ensure separate partition exists for /var/log Details The /var/log directory is used by system services to store log data . There are two important reasons to...
Ensure separate partition exists for /var/log/audit Details The auditing daemon, auditd, stores log data in the /var/log/audit directory. There are two important reasons to ensure that...
Ensure separate partition exists for /var/tmp Details The /var/tmp directory is a world-writable directory used for temporary storage by all users and some applications. Since the...
Ensure system is disabled when audit logs are full – ‘action_mail_acct’ Details The auditd daemon can be configured to halt the system when the audit logs are full. In high security...
Ensure system is disabled when audit logs are full – ‘admin_space_left_action’ Details The auditd daemon can be configured to halt the system when the audit logs are full. In high security...
Ensure system is disabled when audit logs are full – ‘space_left_action’ Details The auditd daemon can be configured to halt the system when the audit logs are full. In high security...
Ensure the SELinux state is enforcing Details Set SELinux to enable when the system is booted. SELinux must be enabled at boot time in to ensure...