GEN000000-LNX00360 – The X server must have the correct options enabled – ‘-auth’
Details Without the correct options enabled, the Xwindows system would be less secure and there would be no screen timeout....
- Home
- Security Hardening
- DISA STIG For Red Hat Enterprise Linux 5 V1R18
DISA STIG For Red Hat Enterprise Linux 5 V1R18
GEN000000-LNX00360 – The X server must have the correct options enabled – ‘-s <= 15'
Details Without the correct options enabled, the Xwindows system would be less secure and there would be no screen timeout....GEN000000-LNX00660 – The /etc/securetty file must have mode 0640 or less permissive.
Details The securetty file contains the list of terminals permitting direct root logins. It must be protected from unauthorized modification....GEN000000-LNX00720 – Auditing must be enabled at boot by setting a kernel parameter.
Details If auditing is enabled late in the boot process, the actions of startup scripts may not be audited. Some...GEN000000-LNX00800 – Use a Linux Security Module configured to limit privileges of system services – ‘SELINUXTYPE = targeted or strict’
Details Linux Security Modules such as SELinux and AppArmor can be used to provide protection from software exploits by explicitly...GEN000000-LNX00800 – Use a Linux Security Module configured to limit the privileges of system services – ‘SELINUX = enforcing’
Details Linux Security Modules such as SELinux and AppArmor can be used to provide protection from software exploits by explicitly...GEN000000-LNX00480 – The /etc/sysctl.conf file must be owned by root.
Details The sysctl.conf file specifies the values for kernel parameters to be set on boot. These settings can affect the...GEN000000-LNX00500 – The /etc/sysctl.conf file must be group-owned by root.
Details The sysctl.conf file specifies the values for kernel parameters to be set on boot. These settings can affect the...GEN000000-LNX00520 – The /etc/sysctl.conf file must have mode 0600 or less permissive.
Details The sysctl.conf file specifies the values for kernel parameters to be set on boot. These settings can affect the...GEN000000-LNX00530 – The /etc/sysctl.conf file must not have an extended ACL.
Details The sysctl.conf file specifies the values for kernel parameters to be set on boot. These settings can affect the...