Home
Security Hardening
DISA STIG For Red Hat Enterprise Linux 5 V1R18

DISA STIG For Red Hat Enterprise Linux 5 V1R18

GEN000000-LNX00320 – The system must not have special privilege accounts, such as shutdown and halt – ‘/etc/shadow – shutdown’
Details If special privilege accounts are compromised, the accounts could provide privileges to execute malicious commands on a system. Solution...
GEN000000-LNX00380 – An X server must have none of the following options enabled: -ac, -core (except for debugging), or -nolock – ‘-ac’
Details These options will detract from the security of the Xwindows system. Solution Disable the unwanted options:Procedure:For gdm:Remove the -ac,...
GEN000000-LNX00380 – An X server must have none of the following options enabled: -ac, -core (except for debugging), or -nolock – ‘-core’
Details These options will detract from the security of the Xwindows system. Solution Disable the unwanted options:Procedure:For gdm:Remove the -ac,...
GEN000000-LNX00380 – An X server must have none of the following options enabled: -ac, -core (except for debugging) or -nolock – ‘-nolock’
Details These options will detract from the security of the Xwindows system. Solution Disable the unwanted options:Procedure:For gdm:Remove the -ac,...
GEN000000-LNX00400 – The /etc/security/access.conf file must be owned by root.
Details The /etc/access.conf file contains entries restricting access from the system console by authorized System Administrators. If the file is...
GEN000000-LNX00420 – The /etc/security/access.conf file must have a privileged group owner.
Details Depending on the access restrictions of the /etc/access.conf file, if the group owner were not a privileged group, it...
GEN000000-LNX00440 – The /etc/security/access.conf file must have mode 0640 or less permissive.
Details If the access permissions are more permissive than 0640, system security could be compromised. Solution Use the chmod command...
GEN000000-LNX00450 – The /etc/security/access.conf file must not have an extended ACL.
Details If the access permissions are more permissive than 0640, system security could be compromised. Solution Remove the extended ACL...
GEN000000-LNX00360 – The X server must have the correct options enabled – ‘:0 /usr/bin/X:0’
Details Without the correct options enabled, the Xwindows system would be less secure and there would be no screen timeout....
GEN000000-LNX00360 – The X server must have the correct options enabled – ‘-audit = 4’
Details Without the correct options enabled, the Xwindows system would be less secure and there would be no screen timeout....

Prev Next

DISA STIG For Red Hat Enterprise Linux 5 V1R18

GEN000000-LNX00320 – The system must not have special privilege accounts, such as shutdown and halt – ‘/etc/shadow – shutdown’

GEN000000-LNX00380 – An X server must have none of the following options enabled: -ac, -core (except for debugging), or -nolock – ‘-ac’

GEN000000-LNX00380 – An X server must have none of the following options enabled: -ac, -core (except for debugging), or -nolock – ‘-core’

GEN000000-LNX00380 – An X server must have none of the following options enabled: -ac, -core (except for debugging) or -nolock – ‘-nolock’

GEN000000-LNX00400 – The /etc/security/access.conf file must be owned by root.

GEN000000-LNX00420 – The /etc/security/access.conf file must have a privileged group owner.

GEN000000-LNX00440 – The /etc/security/access.conf file must have mode 0640 or less permissive.

GEN000000-LNX00450 – The /etc/security/access.conf file must not have an extended ACL.

GEN000000-LNX00360 – The X server must have the correct options enabled – ‘:0 /usr/bin/X:0’

GEN000000-LNX00360 – The X server must have the correct options enabled – ‘-audit = 4’