Ensure address space layout randomization (ASLR) is enabled – config
Details Address space layout randomization (ASLR) is an exploit mitigation technique which randomly arranges the address space of key data...
- Home
- Security Hardening
- CIS Ubuntu Linux 18.04 LTS Workstation L1 V2.1.0
CIS Ubuntu Linux 18.04 LTS Workstation L1 V2.1.0
Ensure address space layout randomization (ASLR) is enabled – sysctl
Details Address space layout randomization (ASLR) is an exploit mitigation technique which randomly arranges the address space of key data...Ensure AIDE is installed – aide
Details AIDE takes a snapshot of filesystem state including modification times, permissions, and file hashes which can then be used...Ensure AIDE is installed – aide-common
Details AIDE takes a snapshot of filesystem state including modification times, permissions, and file hashes which can then be used...Ensure AppArmor is enabled in the bootloader configuration – apparmor
Details Configure AppArmor to be enabled at boot time and verify that it has not been overwritten by the bootloader...Ensure AppArmor is enabled in the bootloader configuration – security
Details Configure AppArmor to be enabled at boot time and verify that it has not been overwritten by the bootloader...Ensure AppArmor is installed
Details AppArmor provides Mandatory Access Controls. Rationale: Without a Mandatory Access Control system installed only the default Discretionary Access Control...Ensure authentication required for single user mode
Details Single user mode is used for recovery when the system detects an issue during boot or by manual selection...Ensure bootloader password is set – ‘passwd_pbkdf2’
Details Setting the boot loader password will require that anyone rebooting the system must enter a password before being able...Ensure bootloader password is set – ‘set superusers’
Details Setting the boot loader password will require that anyone rebooting the system must enter a password before being able...