CM-6(b)

34 rules found Severity: High

25 rules found Severity: Medium

17 rules found Severity: Medium

27 rules found Severity: Medium

24 rules found Severity: Medium

29 rules found Severity: Medium

34 rules found Severity: Medium

11 rules found Severity: Medium

12 rules found Severity: Medium

18 rules found Severity: Medium

12 rules found Severity: Medium

11 rules found Severity: Medium

13 rules found Severity: Medium

16 rules found Severity: Medium

15 rules found Severity: Medium

6 rules found Severity: Medium

1 rule found Severity: Medium

3 rules found Severity: High

1 rule found Severity: Medium

2 rules found Severity: High

1 rule found Severity: Medium

1 rule found Severity: High

1 rule found Severity: Medium

3 rules found Severity: Medium

1 rule found Severity: Medium

2 rules found Severity: Medium

1 rule found Severity: High

1 rule found Severity: Medium

5 rules found Severity: Medium

Ensure There Are No Accounts With Blank or Null Passwords

Ensure that System Accounts Do Not Run a Shell Upon Login

The operating system must restrict privilege elevation to authorized personnel

Ensure invoking users password for privilege escalation when using sudo

Disable Accepting ICMP Redirects for All IPv6 Interfaces

Disable Kernel Parameter for IPv6 Forwarding

Disable Kernel Parameter for Accepting Source-Routed Packets on IPv6 Interfaces by Default

Disable X11 Forwarding

Disable Kernel Parameter for IPv4 Forwarding on all IPv4 Interfaces

Add grpquota Option to /home

Add noexec Option to /home

Add usrquota Option to /home

Ensure tftp Daemon Uses Secure Mode

Enable SSH Server firewalld Firewall Exception

Prevent remote hosts from connecting to the proxy display

Disable graphical user interface

Add nosuid Option to /boot/efi

Make sure the Container Security Operator is installed

System Must Avoid Meltdown and Spectre Exploit Vulnerabilities in Modern Processors

Disable GDM Unattended or Automatic Login

The PAM configuration should not be changed automatically

Enforce Delay After Failed Logon Attempts

Set Password Retry Limit

Only Authorized Local User Accounts Exist on Operating System

Verify Only Root Has UID 0

Enable auditd Service

Disable Ctrl-Alt-Del Burst Action

All Interactive User Home Directories Must Be Group-Owned By The Primary Group

Remove Default Configuration to Disable Syscall Auditing

Ensure System is Not Acting as a Network Sniffer

Disable Kernel Parameter for Accepting ICMP Redirects by Default on IPv6 Interfaces

Disable Kernel Parameter for IPv6 Forwarding by default

Ensure All World-Writable Directories Are Group Owned by a System Account

Disable Kernel Parameter for IP Forwarding on IPv4 Interfaces

Disable SSH Access via Empty Passwords

Do Not Allow SSH Environment Options

NetworkManager DNS Mode Must Be Must Configured