Ensure core dumps are restricted – sysctl config
Details A core dump is the memory of an executable program. It is generally used to determine why a program...
- Home
- Security Hardening
- CIS Ubuntu Linux 18.04 LXD Host L1 Workstation V1.0.0
CIS Ubuntu Linux 18.04 LXD Host L1 Workstation V1.0.0
Ensure filesystem integrity is regularly checked
Details Periodic checking of the filesystem integrity is needed to detect changes to the filesystem. Rationale: Periodic file checking allows...Ensure GPG keys are configured
Details Most packages managers implement GPG key signing to verify package integrity during installation. Rationale: It is important to ensure...Ensure interactive boot is not enabled
Details Interactive boot allows console users to interactively select which services start on boot. Not all distributions support this capability....Ensure mounting of cramfs filesystems is disabled – lsmod
Details The cramfs filesystem type is a compressed read-only Linux filesystem embedded in small footprint systems. A cramfs image can...Ensure mounting of cramfs filesystems is disabled – modprobe
Details The cramfs filesystem type is a compressed read-only Linux filesystem embedded in small footprint systems. A cramfs image can...Ensure mounting of freevxfs filesystems is disabled – lsmod
Details The freevxfs filesystem type is a free version of the Veritas type filesystem. This is the primary filesystem type...Ensure mounting of freevxfs filesystems is disabled – modprobe
Details The freevxfs filesystem type is a free version of the Veritas type filesystem. This is the primary filesystem type...Ensure mounting of hfs filesystems is disabled – lsmod
Details The hfs filesystem type is a hierarchical filesystem that allows you to mount Mac OS filesystems. Rationale: Removing support...Ensure mounting of hfs filesystems is disabled – modprobe
Details The hfs filesystem type is a hierarchical filesystem that allows you to mount Mac OS filesystems. Rationale: Removing support...