18 - ATO Pathways

22 rules found Severity: High

17 rules found Severity: High

27 rules found Severity: Medium

17 rules found Severity: High

11 rules found Severity: High

24 rules found Severity: Medium

7 rules found Severity: Medium

21 rules found Severity: Medium

13 rules found Severity: High

26 rules found Severity: Medium

12 rules found Severity: Medium

34 rules found Severity: Medium

33 rules found Severity: High

16 rules found Severity: High

31 rules found Severity: Medium

34 rules found Severity: High

25 rules found Severity: Medium

31 rules found Severity: Medium

33 rules found Severity: Low

29 rules found Severity: Medium

9 rules found Severity: Low

26 rules found Severity: Medium

32 rules found Severity: Medium

31 rules found Severity: Medium

34 rules found Severity: Medium

29 rules found Severity: Medium

31 rules found Severity: Medium

44 rules found Severity: Medium

17 rules found Severity: High

20 rules found Severity: High

17 rules found Severity: Medium

9 rules found Severity: Medium

20 rules found Severity: Medium

8 rules found

15 rules found Severity: Medium

24 rules found Severity: Medium

26 rules found Severity: High

18 rules found Severity: Medium

26 rules found Severity: High

26 rules found Severity: Medium

25 rules found Severity: Medium

26 rules found Severity: Medium

33 rules found Severity: Medium

26 rules found Severity: Medium

33 rules found Severity: Medium

26 rules found Severity: Medium

30 rules found Severity: Medium

20 rules found Severity: Medium

30 rules found Severity: Medium

27 rules found Severity: Medium

29 rules found Severity: Medium

28 rules found Severity: Medium

29 rules found Severity: Medium

28 rules found Severity: Medium

27 rules found Severity: Medium

29 rules found Severity: Medium

30 rules found Severity: Medium

35 rules found Severity: Medium

21 rules found Severity: Medium

34 rules found Severity: Medium

29 rules found Severity: Medium

35 rules found Severity: Medium

32 rules found Severity: Medium

35 rules found Severity: Medium

32 rules found Severity: Medium

35 rules found Severity: Medium

32 rules found Severity: Medium

35 rules found Severity: Medium

33 rules found Severity: Medium

32 rules found Severity: Medium

33 rules found Severity: Medium

32 rules found Severity: Medium

35 rules found Severity: High

15 rules found Severity: Medium

24 rules found Severity: Medium

25 rules found Severity: Medium

18 rules found

25 rules found Severity: Medium

27 rules found Severity: Medium

28 rules found Severity: Medium

35 rules found Severity: Medium

34 rules found Severity: Medium

28 rules found Severity: Medium

30 rules found Severity: Medium

27 rules found Severity: Medium

14 rules found Severity: High

31 rules found Severity: Medium

7 rules found Severity: Medium

33 rules found Severity: Medium

34 rules found Severity: Medium

7 rules found Severity: Medium

35 rules found Severity: High

7 rules found Severity: Medium

14 rules found Severity: Medium

34 rules found Severity: Medium

36 rules found Severity: Medium

32 rules found Severity: Medium

29 rules found Severity: High

33 rules found

30 rules found Severity: Medium

19 rules found Severity: Medium

15 rules found Severity: Medium

9 rules found Severity: Medium

12 rules found Severity: Medium

25 rules found Severity: Medium

19 rules found Severity: Medium

6 rules found

13 rules found Severity: Medium

19 rules found Severity: Medium

14 rules found Severity: Medium

20 rules found Severity: Medium

23 rules found Severity: Medium

6 rules found Severity: Medium

12 rules found Severity: Medium

16 rules found Severity: Medium

6 rules found

14 rules found Severity: Medium

11 rules found Severity: Medium

14 rules found Severity: Medium

5 rules found Severity: Low

8 rules found Severity: Medium

14 rules found Severity: Medium

1 rule found Severity: Medium

3 rules found Severity: Low

2 rules found Severity: Low

3 rules found Severity: Medium

1 rule found Severity: Medium

18

Verify and Correct File Permissions with RPM

Verify and Correct Ownership with RPM

Install the Host Intrusion Prevention System (HIPS) Module

The Installed Operating System Is Vendor Supported

Install Intrusion Detection Software

Ensure Software Patches Installed

Install the Asset Configuration Compliance Module (ACCM)

Install the Policy Auditor (PA) Module

Require Authentication for Emergency Systemd Target

Require Authentication for Single User Mode

Disable the GNOME3 Login Restart and Shutdown Buttons

Set Account Expiration Following Inactivity

Require Encryption for Remote Access in GNOME3

Set Password Warning Age

Prevent Login to Accounts With Empty Password

Disable Ctrl-Alt-Del Reboot Key Sequence in GNOME3

Verify No netrc Files Exist

Verify Only Root Has UID 0

Ensure that System Accounts Do Not Run a Shell Upon Login

Restrict Serial Port Root Logins

Restrict Virtual Console Root Logins

Limit the Number of Concurrent Login Sessions Allowed Per User

Ensure that User Home Directories are not Group-Writable or World-Readable

Ensure yum Removes Previous Package Versions

Ensure the Default Bash Umask is Set Correctly

Ensure the Default Umask is Set Correctly in login.defs

Ensure the Default Umask is Set Correctly in /etc/profile

Make the auditd Configuration Immutable

Ensure auditd Collects System Administrator Actions

Record Events that Modify User/Group Information

System Audit Logs Must Have Mode 0750 or Less Permissive

System Audit Logs Must Be Owned By Root

Disable Ctrl-Alt-Del Burst Action

Disable Ctrl-Alt-Del Reboot Activation

Verify that Interactive Boot is Disabled

Assign Expiration Date to Emergency Accounts

Assign Expiration Date to Temporary Accounts

Root Path Must Be Vendor Default

Ensure the Default C Shell Umask is Set Correctly

Verify /boot/grub2/grub.cfg Group Ownership

Verify /boot/grub2/grub.cfg User Ownership

Verify /boot/grub2/grub.cfg Permissions

Set Boot Loader Password in grub2

Verify the UEFI Boot Loader grub.cfg Group Ownership

Verify the UEFI Boot Loader grub.cfg User Ownership

Verify the UEFI Boot Loader grub.cfg Permissions

Set the UEFI Boot Loader Password

Record Events that Modify User/Group Information - /etc/group

Record Events that Modify User/Group Information - /etc/gshadow

Record Events that Modify User/Group Information - /etc/security/opasswd

Ensure Log Files Are Owned By Appropriate Group

Record Events that Modify User/Group Information - /etc/passwd

Ensure Log Files Are Owned By Appropriate User

Record Events that Modify User/Group Information - /etc/shadow

Verify ip6tables Enabled if Using IPv6

System Audit Logs Must Have Mode 0640 or Less Permissive

Verify iptables Enabled

Disable Kernel Parameter for Accepting Source-Routed Packets on all IPv6 Interfaces

Disable Kernel Parameter for Accepting Source-Routed Packets on IPv6 Interfaces by Default

Disable Kernel Parameter for Accepting Source-Routed Packets on all IPv4 Interfaces

Enable Kernel Parameter to Use Reverse Path Filtering on all IPv4 Interfaces

Disable Kernel Parameter for Accepting Secure ICMP Redirects on all IPv4 Interfaces

Disable Kernel Parameter for Accepting ICMP Redirects by Default on IPv4 Interfaces

Disable Kernel Parameter for Accepting Source-Routed Packets on IPv4 Interfaces by Default

Enable Kernel Parameter to Use Reverse Path Filtering on all IPv4 Interfaces by Default

Configure Kernel Parameter for Accepting Secure Redirects By Default

Enable Kernel Parameter to Ignore ICMP Broadcast Echo Requests on IPv4 Interfaces

Enable Kernel Parameter to Use TCP Syncookies on Network Interfaces

Disable Kernel Parameter for Sending ICMP Redirects on all IPv4 Interfaces

Disable Kernel Parameter for Sending ICMP Redirects on all IPv4 Interfaces by Default

Verify that All World-Writable Directories Have Sticky Bits Set

Ensure All SGID Executables Are Authorized

Ensure All SUID Executables Are Authorized

Ensure No World-Writable Files Exist

Ensure All Files Are Owned by a Group

Verify Group Who Owns group File

Verify Group Who Owns gshadow File

Verify Group Who Owns passwd File

Verify Group Who Owns shadow File