Home
Security Hardening
DISA STIG Ubuntu 20.04 LTS V1R1

DISA STIG Ubuntu 20.04 LTS V1R1

UBTU-20-010038 – The Ubuntu operating system must display the Standard Mandatory DoD Notice and Consent Banner before granting any local or remote connection to the system – sshd_config
Details Display of a standardized and approved use notification before granting access to the publicly accessible operating system ensures privacy...
UBTU-20-010006 – The Ubuntu operating system must map the authenticated identity to the user or group account for PKI-based authentication.
Details Without mapping the certificate used to authenticate to the user account, the ability to determine the identity of the...
UBTU-20-010042 – The Ubuntu operating system must use SSH to protect the confidentiality and integrity of transmitted information – openssh-server
Details Without protection of the transmitted information, confidentiality and integrity may be compromised because unprotected communications can be intercepted and...
UBTU-20-010007 – The Ubuntu operating system must enforce 24 hours/1 day as the minimum password lifetime. Passwords for new users must have a 24 hours/1 day minimum password lifetime restriction.
Details Enforcing a minimum password lifetime helps to prevent repeated password changes to defeat the password reuse or history enforcement...
UBTU-20-010042 – The Ubuntu operating system must use SSH to protect the confidentiality and integrity of transmitted information – sshd.service
Details Without protection of the transmitted information, confidentiality and integrity may be compromised because unprotected communications can be intercepted and...
UBTU-20-010008 – The Ubuntu operating system must enforce a 60-day maximum password lifetime restriction. Passwords for new users must have a 60-day maximum password lifetime restriction.
Details Any password, no matter how complex, can eventually be cracked. Therefore, passwords need to be changed periodically. If the...
UBTU-20-010043 – The Ubuntu operating system must configure the SSH daemon to use Message Authentication Codes (MACs) employing FIPS 140-2 approved cryptographic hashes to prevent the unauthorized disclosure of information and/or detect changes to information during transmission.
Details Without cryptographic integrity protections, information can be altered by unauthorized users without detection. Remote access (e.g., RDP) is access...
UBTU-20-010009 – Ubuntu operating systems when booted must require authentication upon booting into single-user and maintenance modes.
Details To mitigate the risk of unauthorized access to sensitive information by entities that have been issued certificates by DoD-approved...
UBTU-20-010010 – The Ubuntu operating system must uniquely identify interactive users.
Details To assure accountability and prevent unauthenticated access, organizational users must be identified and authenticated to prevent potential misuse and...
UBTU-20-010012 – The Ubuntu operating system must ensure only users who need access to security functions are part of sudo group.
Details An isolation boundary provides access control and protects the integrity of the hardware, software, and firmware that perform security...

Prev Next

DISA STIG Ubuntu 20.04 LTS V1R1

UBTU-20-010038 – The Ubuntu operating system must display the Standard Mandatory DoD Notice and Consent Banner before granting any local or remote connection to the system – sshd_config

UBTU-20-010006 – The Ubuntu operating system must map the authenticated identity to the user or group account for PKI-based authentication.

UBTU-20-010042 – The Ubuntu operating system must use SSH to protect the confidentiality and integrity of transmitted information – openssh-server

UBTU-20-010007 – The Ubuntu operating system must enforce 24 hours/1 day as the minimum password lifetime. Passwords for new users must have a 24 hours/1 day minimum password lifetime restriction.

UBTU-20-010042 – The Ubuntu operating system must use SSH to protect the confidentiality and integrity of transmitted information – sshd.service

UBTU-20-010008 – The Ubuntu operating system must enforce a 60-day maximum password lifetime restriction. Passwords for new users must have a 60-day maximum password lifetime restriction.

UBTU-20-010043 – The Ubuntu operating system must configure the SSH daemon to use Message Authentication Codes (MACs) employing FIPS 140-2 approved cryptographic hashes to prevent the unauthorized disclosure of information and/or detect changes to information during transmission.

UBTU-20-010009 – Ubuntu operating systems when booted must require authentication upon booting into single-user and maintenance modes.

UBTU-20-010010 – The Ubuntu operating system must uniquely identify interactive users.

UBTU-20-010012 – The Ubuntu operating system must ensure only users who need access to security functions are part of sudo group.