GEN000000-LNX00560 – The Linux NFS Server must not have the insecure file locking option.
Details Insecure file locking could allow for sensitive data to be viewed or edited by an unauthorized user. Solution Remove...
- Home
- Security Hardening
- DISA STIG For Red Hat Enterprise Linux 5 V1R18
DISA STIG For Red Hat Enterprise Linux 5 V1R18
GEN000000-LNX00580 – The x86 CTRL-ALT-DELETE key sequence must be disabled.
Details Undesirable reboots can occur if the CTRL-ALT-DELETE key sequence is not disabled. Such reboots may cause a loss of...GEN000000-LNX00600 – PAM system must not grant sole access to admin privileges to the first user who logs into the console.
Details If an unauthorized user has been granted privileged access while logged in at the console, the security posture of...GEN000000-LNX00620 – The /etc/securetty file must be group-owned by root, sys, or bin.
Details The securetty file contains the list of terminals permitting direct root logins. It must be protected from unauthorized modification....GEN000000-LNX00640 – The /etc/securetty file must be owned by root.
Details The securetty file contains the list of terminals permitting direct root logins. It must be protected from unauthorized modification....GEN000020 – The system must require authentication upon booting into single-user and maintenance modes.
Details If the system does not require valid root authentication before it boots into single-user or maintenance mode, anyone who...GEN000100 – The operating system must be a supported release.
Details An operating system release is considered ‘supported’ if the vendor continues to provide security patches for the product. With...GEN000120 – System security patches and updates must be installed and up-to-date.
Details Timely patching is critical for maintaining the operational availability, confidentiality, and integrity of information technology (IT) systems. However, failure...GEN000140-2 – A file integrity baseline including cryptographic hashes must be created and maintained – ‘cryptographic hash is used ‘
Details A file integrity baseline is a collection of file metadata that is to evaluate the integrity of the system....GEN000140-2 – A file integrity baseline including cryptographic hashes must be created and maintained – ‘database location’
Details A file integrity baseline is a collection of file metadata that is to evaluate the integrity of the system....