Home
Security Hardening
DISA STIG Ubuntu 18.04 LTS V2R4

DISA STIG Ubuntu 18.04 LTS V2R4

UBTU-18-010023 – The Ubuntu operating system must have an application firewall installed in order to control remote access methods.
Details Remote access services, such as those providing remote access to network devices and information systems, which lack automated control...
UBTU-18-010025 – The Ubuntu operating system audit event multiplexor must be configured to off-load audit logs onto a different system or storage media from the system being audited – active
Details Information stored in one location is vulnerable to accidental or incidental deletion or alteration. Off-loading is a common process...
UBTU-18-010025 – The Ubuntu operating system audit event multiplexor must be configured to off-load audit logs onto a different system or storage media from the system being audited – auditd is-active
Details Information stored in one location is vulnerable to accidental or incidental deletion or alteration. Off-loading is a common process...
UBTU-18-010025 – The Ubuntu operating system audit event multiplexor must be configured to off-load audit logs onto a different system or storage media from the system being audited – installed
Details Information stored in one location is vulnerable to accidental or incidental deletion or alteration. Off-loading is a common process...
UBTU-18-010025 – The Ubuntu operating system audit event multiplexor must be configured to off-load audit logs onto a different system or storage media from the system being audited – remote_server
Details Information stored in one location is vulnerable to accidental or incidental deletion or alteration. Off-loading is a common process...
UBTU-18-010030 – The Ubuntu operating system must be configured such that Pluggable Authentication Module (PAM) prohibits the use of cached authentications after one day – /etc/sssd/conf.d/*
Details If cached authentication information is out-of-date, the validity of the authentication information may be questionable. Solution Configure Pluggable Authentication...
UBTU-18-010030 – The Ubuntu operating system must be configured such that Pluggable Authentication Module (PAM) prohibits the use of cached authentications after one day – /etc/sssd/sssd.conf
Details If cached authentication information is out-of-date, the validity of the authentication information may be questionable. Solution Configure Pluggable Authentication...
UBTU-18-010031 – The Ubuntu operating system must enforce a delay of at least 4 seconds between logon prompts following a failed logon attempt.
Details Limiting the number of logon attempts over a certain time interval reduces the chances that an unauthorized user may...

DISA STIG Ubuntu 18.04 LTS V2R4

UBTU-18-010023 – The Ubuntu operating system must have an application firewall installed in order to control remote access methods.

UBTU-18-010025 – The Ubuntu operating system audit event multiplexor must be configured to off-load audit logs onto a different system or storage media from the system being audited – active

UBTU-18-010025 – The Ubuntu operating system audit event multiplexor must be configured to off-load audit logs onto a different system or storage media from the system being audited – auditd is-active

UBTU-18-010025 – The Ubuntu operating system audit event multiplexor must be configured to off-load audit logs onto a different system or storage media from the system being audited – installed

UBTU-18-010025 – The Ubuntu operating system audit event multiplexor must be configured to off-load audit logs onto a different system or storage media from the system being audited – remote_server

UBTU-18-010030 – The Ubuntu operating system must be configured such that Pluggable Authentication Module (PAM) prohibits the use of cached authentications after one day – /etc/sssd/conf.d/*

UBTU-18-010030 – The Ubuntu operating system must be configured such that Pluggable Authentication Module (PAM) prohibits the use of cached authentications after one day – /etc/sssd/sssd.conf

UBTU-18-010031 – The Ubuntu operating system must enforce a delay of at least 4 seconds between logon prompts following a failed logon attempt.