OL6-00-000035 – The /etc/shadow file must have mode 0000.
Details The ‘/etc/shadow’ file contains the list of local system accounts and stores password hashes. Protection of this file is...
- Home
- Security Hardening
- DISA STIG Oracle Linux 6 V1R18
DISA STIG Oracle Linux 6 V1R18
OL6-00-000017 – The system must use a Linux Security Module at boot time.
Details Disabling a major host protection feature, such as SELinux, at boot time prevents it from confining system services at...OL6-00-000018 – A file integrity baseline must be created.
Details For AIDE to be effective, an initial database of ‘known-good’ information about files must be captured and it should...OL6-00-000019 – There must be no .rhosts or hosts.equiv files on the system – ‘/etc/hosts.equiv’
Details Trust files are convenient, but when used in conjunction with the R-services, they can allow unauthenticated access to a...OL6-00-000019 – There must be no .rhosts or hosts.equiv files on the system – ‘~/.rhosts’
Details Trust files are convenient, but when used in conjunction with the R-services, they can allow unauthenticated access to a...OL6-00-000021 – The Oracle Linux operating system must not contain .shosts or shosts.equiv files.
Details The .shosts and shosts.equiv files are used to configure host-based authentication for the system via SSH. Host-based authentication is...OL6-00-000043 – The /etc/group file must be group-owned by root.
Details The ‘/etc/group’ file contains information regarding groups that are configured on the system. Protection of this file is important...OL6-00-000044 – The /etc/group file must have mode 0644 or less permissive.
Details The ‘/etc/group’ file contains information regarding groups that are configured on the system. Protection of this file is important...OL6-00-000045 – Library files must have mode 0755 or less permissive – ‘/lib’
Details Files from shared library directories are loaded into the address space of processes (including privileged ones) or of the...OL6-00-000045 – Library files must have mode 0755 or less permissive – ‘/lib64’
Details Files from shared library directories are loaded into the address space of processes (including privileged ones) or of the...