5 - ATO Pathways

22 rules found Severity: High

32 rules found Severity: Medium

27 rules found Severity: Medium

17 rules found Severity: High

27 rules found Severity: Medium

18 rules found Severity: Medium

31 rules found Severity: Low

32 rules found Severity: Low

32 rules found Severity: Medium

19 rules found Severity: Medium

7 rules found Severity: Medium

19 rules found Severity: Medium

27 rules found Severity: Medium

7 rules found Severity: Medium

26 rules found Severity: Medium

27 rules found Severity: Medium

21 rules found Severity: Medium

13 rules found Severity: High

21 rules found Severity: Medium

26 rules found Severity: Medium

34 rules found Severity: Medium

33 rules found Severity: Medium

32 rules found Severity: Medium

34 rules found Severity: Medium

32 rules found Severity: Medium

33 rules found Severity: Low

33 rules found Severity: High

16 rules found Severity: High

31 rules found Severity: Medium

34 rules found Severity: High

32 rules found Severity: Medium

25 rules found Severity: Medium

31 rules found Severity: Medium

29 rules found Severity: Medium

36 rules found Severity: Medium

34 rules found Severity: Medium

22 rules found Severity: Medium

34 rules found Severity: Medium

29 rules found Severity: Medium

31 rules found Severity: Medium

21 rules found Severity: Medium

16 rules found Severity: Medium

21 rules found Severity: Medium

14 rules found Severity: Medium

44 rules found Severity: Medium

33 rules found Severity: Medium

14 rules found Severity: Medium

33 rules found Severity: Medium

21 rules found Severity: Medium

34 rules found Severity: Medium

33 rules found Severity: Medium

21 rules found Severity: Medium

16 rules found Severity: Medium

33 rules found Severity: Medium

21 rules found Severity: Medium

17 rules found Severity: Medium

33 rules found Severity: Medium

34 rules found Severity: Medium

17 rules found Severity: High

20 rules found Severity: High

17 rules found Severity: Medium

33 rules found Severity: Medium

34 rules found Severity: Medium

33 rules found Severity: Medium

15 rules found Severity: Medium

33 rules found Severity: Medium

5 rules found Severity: Medium

13 rules found Severity: Medium

23 rules found Severity: Medium

5 rules found Severity: Medium

9 rules found Severity: Medium

33 rules found Severity: Medium

20 rules found Severity: Medium

33 rules found Severity: Medium

32 rules found Severity: Medium

33 rules found Severity: Medium

25 rules found Severity: Medium

27 rules found Severity: Medium

28 rules found Severity: Medium

26 rules found Severity: Medium

27 rules found Severity: Medium

25 rules found Severity: Medium

27 rules found Severity: Medium

28 rules found Severity: Medium

26 rules found Severity: Medium

33 rules found Severity: Medium

34 rules found Severity: Medium

33 rules found Severity: Medium

22 rules found Severity: Low

31 rules found Severity: Medium

63 rules found Severity: Medium

64 rules found Severity: Medium

31 rules found Severity: Medium

33 rules found Severity: Medium

30 rules found Severity: Medium

60 rules found Severity: Medium

28 rules found Severity: Medium

34 rules found Severity: Medium

24 rules found Severity: Medium

26 rules found Severity: High

14 rules found Severity: Medium

18 rules found Severity: Medium

26 rules found Severity: High

26 rules found Severity: Medium

30 rules found Severity: Medium

31 rules found Severity: Medium

25 rules found Severity: Medium

26 rules found Severity: Medium

33 rules found Severity: Medium

32 rules found Severity: Medium

29 rules found Severity: Medium

26 rules found Severity: Medium

29 rules found Severity: Medium

30 rules found

31 rules found Severity: Medium

21 rules found Severity: Medium

20 rules found Severity: Medium

21 rules found Severity: Medium

16 rules found Severity: Medium

17 rules found Severity: Medium

35 rules found Severity: Medium

21 rules found Severity: Medium

34 rules found Severity: Medium

29 rules found Severity: Medium

13 rules found Severity: Medium

35 rules found Severity: Medium

32 rules found Severity: Medium

35 rules found Severity: Medium

13 rules found Severity: Medium

35 rules found Severity: Medium

13 rules found Severity: Medium

32 rules found Severity: Medium

35 rules found Severity: Medium

13 rules found Severity: Medium

35 rules found Severity: Medium

32 rules found Severity: Medium

35 rules found Severity: Medium

13 rules found Severity: Medium

35 rules found Severity: Medium

13 rules found Severity: Medium

33 rules found Severity: Medium

32 rules found Severity: Medium

16 rules found Severity: Medium

33 rules found Severity: Medium

32 rules found Severity: Medium

27 rules found Severity: Medium

15 rules found Severity: Medium

35 rules found Severity: High

19 rules found Severity: Medium

25 rules found Severity: Medium

28 rules found Severity: Medium

23 rules found Severity: Medium

20 rules found Severity: Medium

18 rules found Severity: Medium

12 rules found Severity: Medium

24 rules found Severity: Medium

20 rules found Severity: Medium

24 rules found Severity: Medium

23 rules found Severity: Medium

19 rules found Severity: Medium

24 rules found Severity: Medium

20 rules found Severity: Medium

24 rules found Severity: Medium

16 rules found Severity: Medium

24 rules found Severity: Medium

25 rules found Severity: Medium

18 rules found

15 rules found Severity: Medium

16 rules found Severity: Medium

30 rules found Severity: High

34 rules found Severity: Medium

25 rules found Severity: Medium

27 rules found Severity: Medium

28 rules found Severity: Medium

35 rules found Severity: Medium

34 rules found Severity: Medium

28 rules found Severity: Medium

30 rules found Severity: Medium

27 rules found Severity: Medium

14 rules found Severity: High

31 rules found Severity: Medium

7 rules found Severity: Medium

33 rules found Severity: Medium

34 rules found Severity: Medium

7 rules found Severity: Medium

30 rules found Severity: High

7 rules found Severity: Medium

14 rules found Severity: Medium

35 rules found Severity: High

34 rules found Severity: Medium

36 rules found Severity: Medium

32 rules found Severity: Medium

16 rules found Severity: Medium

33 rules found

30 rules found Severity: Medium

15 rules found Severity: Medium

19 rules found Severity: Medium

9 rules found Severity: Medium

12 rules found Severity: Medium

25 rules found Severity: Medium

23 rules found Severity: Medium

19 rules found Severity: Medium

6 rules found

13 rules found Severity: Medium

19 rules found Severity: Medium

14 rules found Severity: Medium

20 rules found Severity: Medium

23 rules found Severity: Medium

6 rules found Severity: Low

5 rules found

6 rules found Severity: Medium

5 rules found Severity: Low

12 rules found Severity: Medium

16 rules found Severity: Medium

6 rules found

14 rules found Severity: Medium

34 rules found Severity: Medium

16 rules found Severity: High

20 rules found Severity: Medium

14 rules found Severity: Medium

26 rules found Severity: Medium

14 rules found

14 rules found Severity: High

10 rules found Severity: High

14 rules found Severity: High

11 rules found Severity: Medium

11 rules found Severity: High

14 rules found Severity: Medium

12 rules found Severity: Medium

13 rules found Severity: Medium

14 rules found Severity: Medium

12 rules found Severity: Medium

20 rules found Severity: Medium

9 rules found Severity: Medium

14 rules found Severity: Medium

8 rules found Severity: Medium

14 rules found Severity: Medium

1 rule found Severity: Medium

3 rules found Severity: Medium

6 rules found Severity: High

1 rule found Severity: Medium

3 rules found Severity: Medium

2 rules found Severity: High

4 rules found Severity: Medium

1 rule found Severity: Medium

5

Verify and Correct File Permissions with RPM

Install AIDE

Configure Periodic Execution of AIDE

Verify and Correct Ownership with RPM

Install the Host Intrusion Prevention System (HIPS) Module

Build and Test AIDE Database

Configure Notification of Post-AIDE Scan Details

Ensure /var/log Located On Separate Partition

Ensure /var/log/audit Located On Separate Partition

Ensure Users Re-Authenticate for Privilege Escalation - sudo !authenticate

Ensure Users Re-Authenticate for Privilege Escalation - sudo NOPASSWD

Ensure Users Re-Authenticate for Privilege Escalation - sudo

Limit Password Reuse: password-auth

Install the Asset Configuration Compliance Module (ACCM)

Limit Password Reuse: system-auth

Ensure PAM Enforces Password Requirements - Minimum Different Categories

Install the Policy Auditor (PA) Module

Ensure PAM Enforces Password Requirements - Minimum Length

Ensure PAM Enforces Password Requirements - Authentication Retry Prompts Permitted Per-Session

Set PAM''s Password Hashing Algorithm

Require Authentication for Emergency Systemd Target

Disable the GNOME3 Login Restart and Shutdown Buttons

Require Authentication for Single User Mode

Set Account Expiration Following Inactivity

Set Password Maximum Age

Set Password Minimum Age

Set Password Minimum Length in login.defs

Set Password Warning Age

Verify All Account Password Hashes are Shadowed

All GIDs referenced in /etc/passwd must be defined in /etc/group

Prevent Login to Accounts With Empty Password

Disable Ctrl-Alt-Del Reboot Key Sequence in GNOME3

Verify No netrc Files Exist

Verify Only Root Has UID 0

Direct root Logins Not Allowed

Ensure that System Accounts Do Not Run a Shell Upon Login

Restrict Serial Port Root Logins

Restrict Virtual Console Root Logins

Ensure that User Home Directories are not Group-Writable or World-Readable

Enable auditd Service

Make the auditd Configuration Immutable

Record Events that Modify the System's Mandatory Access Controls

Ensure auditd Collects Information on Exporting to Media (successful)

Record Events that Modify the System's Network Environment

Limit Password Reuse

Record Attempts to Alter Process and Session Initiation Information

Ensure auditd Collects System Administrator Actions

Record Events that Modify User/Group Information

System Audit Logs Must Have Mode 0750 or Less Permissive

Ensure PAM Enforces Password Requirements - Minimum Digit Characters

Ensure PAM Enforces Password Requirements - Minimum Different Characters

Ensure PAM Enforces Password Requirements - Minimum Lowercase Characters

Ensure PAM Enforces Password Requirements - Maximum Consecutive Repeating Characters from Same Character Class

System Audit Logs Must Be Owned By Root

Record Events that Modify the System's Discretionary Access Controls - chmod

Set Password Maximum Consecutive Repeating Characters

Record Events that Modify the System's Discretionary Access Controls - chown

Ensure PAM Enforces Password Requirements - Minimum Special Characters

Record Events that Modify the System's Discretionary Access Controls - fchmod

Record Events that Modify the System's Discretionary Access Controls - fchmodat

Ensure PAM Enforces Password Requirements - Minimum Uppercase Characters

Set Password Hashing Algorithm in /etc/libuser.conf

Record Events that Modify the System's Discretionary Access Controls - fchown

Set Password Hashing Algorithm in /etc/login.defs

Set PAM''s Password Hashing Algorithm - password-auth

Record Events that Modify the System's Discretionary Access Controls - fchownat

Record Events that Modify the System's Discretionary Access Controls - fremovexattr

Disable Ctrl-Alt-Del Burst Action

Disable Ctrl-Alt-Del Reboot Activation

Verify that Interactive Boot is Disabled

Record Events that Modify the System's Discretionary Access Controls - fsetxattr

Record Events that Modify the System's Discretionary Access Controls - lchown

Record Events that Modify the System's Discretionary Access Controls - lremovexattr

Record Events that Modify the System's Discretionary Access Controls - lsetxattr

Configure opensc Smart Card Drivers

Record Events that Modify the System's Discretionary Access Controls - removexattr

Record Events that Modify the System's Discretionary Access Controls - setxattr

Configure NSS DB To Use opensc

Force opensc To Use Defined Smart Card Driver