Ensure AIDE is installed Details AIDE takes a snapshot of filesystem state including modification times, permissions, and file hashes which can then be used...
Ensure all AppArmor Profiles are in enforce or complain mode – loaded Details AppArmor profiles define what resources applications are able to access. Rationale: Security configuration requirements vary from site to site....
Ensure all AppArmor Profiles are in enforce or complain mode – unconfined Details AppArmor profiles define what resources applications are able to access. Rationale: Security configuration requirements vary from site to site....
Ensure AppArmor is installed Details AppArmor provides Mandatory Access Controls. Rationale: Without a Mandatory Access Control system installed only the default Discretionary Access Control...
Ensure Avahi Server is not enabled Details Avahi is a free zeroconf implementation, including a system for multicast DNS/DNS-SD service discovery. Avahi allows programs to publish...
Ensure CUPS is not enabled Details The Common Unix Print System (CUPS) provides the ability to print to both local and network printers. A system...
Ensure DHCP Server is not enabled – isc-dhcp-server Details The Dynamic Host Configuration Protocol (DHCP) is a service that allows machines to be dynamically assigned IP addresses. Rationale:...
Ensure DHCP Server is not enabled – isc-dhcp-server6 Details The Dynamic Host Configuration Protocol (DHCP) is a service that allows machines to be dynamically assigned IP addresses. Rationale:...
Ensure DNS Server is not enabled Details The Domain Name System (DNS) is a hierarchical naming system that maps names to IP addresses for computers, services...
Ensure email services are not enabled Details dovecot is an open source mail submission and transport server for Linux based systems. Rationale: Unless mail transport services...