Home
Security Hardening
DISA STIG Ubuntu 18.04 LTS V2R4

DISA STIG Ubuntu 18.04 LTS V2R4

UBTU-18-010000 – Ubuntu operating systems booted with a BIOS must require authentication upon booting into single-user and maintenance modes.
Details To mitigate the risk of unauthorized access to sensitive information by entities that have been issued certificates by DoD-approved...
UBTU-18-010001 – Ubuntu operating systems booted with United Extensible Firmware Interface (UEFI) implemented must require authentication upon booting into single-user mode and maintenance.
Details To mitigate the risk of unauthorized access to sensitive information by entities that have been issued certificates by DoD-approved...
UBTU-18-010017 – The Ubuntu operating system must be configured so that Advance package Tool (APT) removes all software components after updated versions have been installed – Remove-Unused-Kernel-Packages
Details Previous versions of software components that are not removed from the information system after updates have been installed may...
UBTU-18-010018 – The Ubuntu operating system must not have the Network Information Service (NIS) package installed.
Details Removing the Network Information Service (NIS) package decreases the risk of the accidental (or intentional) activation of NIS or...
UBTU-18-010019 – The Ubuntu operating system must not have the rsh-server package installed.
Details It is detrimental for Ubuntu operating systems to provide, or install by default, functionality exceeding requirements or mission objectives....
UBTU-18-010002 – The Ubuntu operating system must initiate session audits at system startup.
Details If auditing is enabled late in the startup process, the actions of some startup processes may not be audited....
UBTU-18-010021 – The Ubuntu operating system must deploy Endpoint Security for Linux Threat Prevention (ENSLTP) – package
Details Without the use of automated mechanisms to scan for security flaws on a continuous and/or periodic basis, the operating...
UBTU-18-010003 – Ubuntu operating systems handling data requiring data at rest protections must employ cryptographic mechanisms to prevent unauthorized disclosure and modification of the information at rest.
Details Information at rest refers to the state of information when it is located on a secondary storage device (e.g.,...
UBTU-18-010021 – The Ubuntu operating system must deploy Endpoint Security for Linux Threat Prevention (ENSLTP) – service
Details Without the use of automated mechanisms to scan for security flaws on a continuous and/or periodic basis, the operating...
UBTU-18-010005 – The Ubuntu operating system must implement NIST FIPS-validated cryptography to protect classified information and for the following: to provision digital signatures, to generate cryptographic hashes, and to protect unclassified information requiring confidentiality and cryptographic protection in accordance with applicable federal laws, Executive Orders, directives, policies, regulations, and standards.
Details Use of weak or untested encryption algorithms undermines the purposes of utilizing encryption to protect data. The operating system...

DISA STIG Ubuntu 18.04 LTS V2R4

UBTU-18-010000 – Ubuntu operating systems booted with a BIOS must require authentication upon booting into single-user and maintenance modes.

UBTU-18-010001 – Ubuntu operating systems booted with United Extensible Firmware Interface (UEFI) implemented must require authentication upon booting into single-user mode and maintenance.

UBTU-18-010017 – The Ubuntu operating system must be configured so that Advance package Tool (APT) removes all software components after updated versions have been installed – Remove-Unused-Kernel-Packages

UBTU-18-010018 – The Ubuntu operating system must not have the Network Information Service (NIS) package installed.

UBTU-18-010019 – The Ubuntu operating system must not have the rsh-server package installed.

UBTU-18-010002 – The Ubuntu operating system must initiate session audits at system startup.

UBTU-18-010021 – The Ubuntu operating system must deploy Endpoint Security for Linux Threat Prevention (ENSLTP) – package

UBTU-18-010003 – Ubuntu operating systems handling data requiring data at rest protections must employ cryptographic mechanisms to prevent unauthorized disclosure and modification of the information at rest.

UBTU-18-010021 – The Ubuntu operating system must deploy Endpoint Security for Linux Threat Prevention (ENSLTP) – service