OL6-00-000030 – The system must not have accounts configured with blank or null passwords – password-auth
Details If an account has an empty password, anyone could log in and run commands with the privileges of that...
- Home
- Security Hardening
- DISA STIG Oracle Linux 6 V1R18
DISA STIG Oracle Linux 6 V1R18
OL6-00-000030 – The system must not have accounts configured with blank or null passwords – system-auth
Details If an account has an empty password, anyone could log in and run commands with the privileges of that...OL6-00-000031 – The /etc/passwd file must not contain password hashes.
Details The hashes for all user account passwords should be stored in the file ‘/etc/shadow’ and never in ‘/etc/passwd’, which...OL6-00-000009 – The Red Hat Network Service (rhnsd) service must not be running, unless it is being used to query the Oracle Unbreakable Linux Network for updates and information – CHKCONFIG
Details Although systems management and patching is extremely important to system security, management by a system outside the enterprise enclave...OL6-00-000032 – The root account must be the only account having a UID of 0.
Details An account has root authority if it has a UID of 0. Multiple accounts with a UID of 0...OL6-00-000011 – System security patches and updates must be installed and up-to-date.
Details Installing software updates is a fundamental mitigation against the exploitation of publicly-known vulnerabilities. NOTE: Nessus has not performed this...OL6-00-000033 – The /etc/shadow file must be owned by root.
Details The ‘/etc/shadow’ file contains the list of local system accounts and stores password hashes. Protection of this file is...OL6-00-000015 – The system package management tool must cryptographically verify the authenticity of all software packages during installation.
Details Ensuring all packages’ cryptographic signatures are valid prior to installation ensures the provenance of the software and protects against...OL6-00-000034 – The /etc/shadow file must be group-owned by root.
Details The ‘/etc/shadow’ file stores password hashes. Protection of this file is critical for system security. Solution To properly set...OL6-00-000016 – A file integrity tool must be installed.
Details The AIDE package must be installed if it is to be available for integrity checking. Solution Install the AIDE...