Ensure nosuid option set on /var/tmp partition
Details The nosuid mount option specifies that the filesystem cannot contain setuid files. Rationale: Since the /var/tmp filesystem is only...
- Home
- Security Hardening
- CIS Ubuntu Linux 18.04 LXD Host L1 Workstation V1.0.0
CIS Ubuntu Linux 18.04 LXD Host L1 Workstation V1.0.0
Ensure package manager repositories are configured
Details Systems need to have package manager repositories configured to ensure they receive the latest patches and updates. Rationale: If...Ensure permissions on bootloader config are configured
Details The grub configuration file contains information on boot settings and passwords for unlocking boot options. The grub configuration is...Ensure prelink is disabled
Details prelink is a program that modifies ELF shared libraries and ELF dynamically linked binaries in such a way that...Ensure sticky bit is set on all world-writable directories
Details Setting the sticky bit on world writable directories prevents users from deleting or renaming files in that directory that...Ensure sudo commands use pty
Details sudo can be configured to run only from a psuedo-pty Rationale: Attackers can run a malicious program using sudo,...Ensure sudo is installed
Details sudo allows a permitted user to execute a command as the superuser or another user, as specified by the...Ensure sudo log file exists
Details sudo can use a custom log file Rationale: A sudo log file simplifies auditing of sudo commands Solution edit...Ensure /tmp is configured
Details The /tmp directory is a world-writable directory used for temporary storage by all users and some applications. Rationale: Making...Ensure XD/NX support is enabled
Details Recent processors in the x86 family support the ability to prevent code execution on a per memory page basis....