Home
Security Hardening
DISA STIG Ubuntu 20.04 LTS V1R1

DISA STIG Ubuntu 20.04 LTS V1R1

UBTU-20-010000 – The Ubuntu operating system must provision temporary user accounts with an expiration time of 72 hours or less.
Details If temporary user accounts remain active when no longer needed or for an excessive period, these accounts may be...
UBTU-20-010002 – The Ubuntu operating system must enable the graphical user logon banner to display the Standard Mandatory DoD Notice and Consent Banner before granting local access to the system via a graphical user logon.
Details Display of a standardized and approved use notification before granting access to the Ubuntu operating system ensures privacy and...
UBTU-20-010003 – The Ubuntu operating system must display the Standard Mandatory DoD Notice and Consent Banner before granting local access to the system via a graphical user logon.
Details Display of a standardized and approved use notification before granting access to the Ubuntu operating system ensures privacy and...
UBTU-20-010004 – The Ubuntu operating system must retain a user’s session lock until that user reestablishes access using established identification and authentication procedures.
Details A session lock is a temporary action taken when a user stops work and moves away from the immediate...
UBTU-20-010033 – The Ubuntu operating system must implement smart card logins for multifactor authentication for local and network access to privileged and non-privileged accounts – PubkeyAuthentication
Details Without the use of multifactor authentication, the ease of access to privileged functions is greatly increased. Multifactor authentication requires...
UBTU-20-010035 – The Ubuntu operating system must use strong authenticators in establishing nonlocal maintenance and diagnostic sessions.
Details Nonlocal maintenance and diagnostic activities are those activities conducted by individuals communicating through a network, either an external network...
UBTU-20-010036 – The Ubuntu operating system must immediately terminate all network connections associated with SSH traffic after a period of inactivity.
Details Automatic session termination addresses the termination of user-initiated logical sessions in contrast to the termination of network connections that...
UBTU-20-010037 – The Ubuntu operating system must immediately terminate all network connections associated with SSH traffic at the end of the session or after 10 minutes of inactivity.
Details Terminating an idle session within a short time period reduces the window of opportunity for unauthorized personnel to take...
UBTU-20-010038 – The Ubuntu operating system must display the Standard Mandatory DoD Notice and Consent Banner before granting any local or remote connection to the system – banner text
Details Display of a standardized and approved use notification before granting access to the publicly accessible operating system ensures privacy...
UBTU-20-010005 – The Ubuntu operating system must allow users to directly initiate a session lock for all connection types.
Details A session lock is a temporary action taken when a user stops work and moves away from the immediate...

DISA STIG Ubuntu 20.04 LTS V1R1

UBTU-20-010000 – The Ubuntu operating system must provision temporary user accounts with an expiration time of 72 hours or less.

UBTU-20-010002 – The Ubuntu operating system must enable the graphical user logon banner to display the Standard Mandatory DoD Notice and Consent Banner before granting local access to the system via a graphical user logon.

UBTU-20-010003 – The Ubuntu operating system must display the Standard Mandatory DoD Notice and Consent Banner before granting local access to the system via a graphical user logon.

UBTU-20-010004 – The Ubuntu operating system must retain a user’s session lock until that user reestablishes access using established identification and authentication procedures.

UBTU-20-010033 – The Ubuntu operating system must implement smart card logins for multifactor authentication for local and network access to privileged and non-privileged accounts – PubkeyAuthentication

UBTU-20-010035 – The Ubuntu operating system must use strong authenticators in establishing nonlocal maintenance and diagnostic sessions.

UBTU-20-010036 – The Ubuntu operating system must immediately terminate all network connections associated with SSH traffic after a period of inactivity.

UBTU-20-010037 – The Ubuntu operating system must immediately terminate all network connections associated with SSH traffic at the end of the session or after 10 minutes of inactivity.

UBTU-20-010038 – The Ubuntu operating system must display the Standard Mandatory DoD Notice and Consent Banner before granting any local or remote connection to the system – banner text

UBTU-20-010005 – The Ubuntu operating system must allow users to directly initiate a session lock for all connection types.