Capacity
CM-7(b)
13
Rule
Severity: Medium
Remove the GDM Package Group
11
Rule
Severity: High
Disable the GNOME3 Login Restart and Shutdown Buttons
11
Rule
Severity: High
Disable GDM Automatic Login
8
Rule
Severity: High
Disable GDM Guest Login
11
Rule
Severity: Medium
Disable GNOME3 Automounting
12
Rule
Severity: Medium
Disable GNOME3 Automount Opening
12
Rule
Severity: Low
Disable GNOME3 Automount running
10
Rule
Severity: Unknown
Disable All GNOME3 Thumbnailers
13
Rule
Severity: High
Disable Ctrl-Alt-Del Reboot Key Sequence in GNOME3
21
Rule
Severity: Medium
Verify firewalld Enabled
30
Rule
Severity: Medium
Verify ip6tables Enabled if Using IPv6
30
Rule
Severity: Medium
Verify iptables Enabled
29
Rule
Severity: Medium
Set Default ip6tables Policy for Incoming Packets
30
Rule
Severity: Medium
Set Default iptables Policy for Incoming Packets
29
Rule
Severity: Medium
Set Default iptables Policy for Forwarded Packets
29
Rule
Severity: Medium
Disable IPv6 Networking Support Automatic Loading
29
Rule
Severity: Medium
Disable IPv6 Addressing on All IPv6 Interfaces
29
Rule
Severity: Medium
Disable IPv6 Addressing on IPv6 Interfaces by Default
18
Rule
Severity: Medium
Configure Accepting Router Advertisements on All IPv6 Interfaces
20
Rule
Severity: Medium
Disable Accepting ICMP Redirects for All IPv6 Interfaces
20
Rule
Severity: Medium
Disable Kernel Parameter for Accepting Source-Routed Packets on all IPv6 Interfaces
19
Rule
Severity: Medium
Disable Kernel Parameter for IPv6 Forwarding
19
Rule
Severity: Medium
Disable Accepting Router Advertisements on all IPv6 Interfaces by Default
17
Rule
Severity: Medium
Disable Kernel Parameter for Accepting ICMP Redirects by Default on IPv6 Interfaces
22
Rule
Severity: Medium
Disable Kernel Parameter for Accepting Source-Routed Packets on IPv6 Interfaces by Default
20
Rule
Severity: Medium
Disable Accepting ICMP Redirects for All IPv4 Interfaces
20
Rule
Severity: Medium
Disable Kernel Parameter for Accepting Source-Routed Packets on all IPv4 Interfaces
20
Rule
Severity: Unknown
Enable Kernel Parameter to Log Martian Packets on all IPv4 Interfaces
22
Rule
Severity: Medium
Enable Kernel Parameter to Use Reverse Path Filtering on all IPv4 Interfaces
22
Rule
Severity: Medium
Disable Kernel Parameter for Accepting Secure ICMP Redirects on all IPv4 Interfaces
21
Rule
Severity: Medium
Disable Kernel Parameter for Accepting ICMP Redirects by Default on IPv4 Interfaces
20
Rule
Severity: Medium
Disable Kernel Parameter for Accepting Source-Routed Packets on IPv4 Interfaces by Default
20
Rule
Severity: Unknown
Enable Kernel Paremeter to Log Martian Packets on all IPv4 Interfaces by Default
20
Rule
Severity: Medium
Enable Kernel Parameter to Use Reverse Path Filtering on all IPv4 Interfaces by Default
20
Rule
Severity: Medium
Configure Kernel Parameter for Accepting Secure Redirects By Default
22
Rule
Severity: Medium
Enable Kernel Parameter to Ignore ICMP Broadcast Echo Requests on IPv4 Interfaces
22
Rule
Severity: Unknown
Enable Kernel Parameter to Ignore Bogus ICMP Error Responses on IPv4 Interfaces
22
Rule
Severity: Medium
Enable Kernel Parameter to Use TCP Syncookies on Network Interfaces
22
Rule
Severity: Medium
Disable Kernel Parameter for Sending ICMP Redirects on all IPv4 Interfaces
22
Rule
Severity: Medium
Disable Kernel Parameter for Sending ICMP Redirects on all IPv4 Interfaces by Default
21
Rule
Severity: Medium
Disable Kernel Parameter for IP Forwarding on IPv4 Interfaces
19
Rule
Severity: Medium
Disable DCCP Support
28
Rule
Severity: Low
Disable RDS Support
22
Rule
Severity: Medium
Disable SCTP Support
29
Rule
Severity: Low
Disable TIPC Support
21
Rule
Severity: Medium
Deactivate Wireless Network Interfaces
23
Rule
Severity: Medium
Disable the Automounter
27
Rule
Severity: Medium
Add nodev Option to /dev/shm
27
Rule
Severity: Medium
Add nosuid Option to /dev/shm
29
Rule
Severity: Low
Disable Avahi Publishing
20
Rule
Severity: Medium
Disable Avahi Server Software
15
Rule
Severity: Low
Disable Apache Qpid (qpidd)
15
Rule
Severity: Medium
Disable Network Router Discovery Daemon (rdisc)
16
Rule
Severity: Medium
Disable At Service (atd)
29
Rule
Severity: High
Uninstall the inet-based telnet server
29
Rule
Severity: High
Uninstall the ssl compliant telnet server
29
Rule
Severity: High
Uninstall the telnet server
29
Rule
Severity: Unknown
Minimize Served Information
13
Rule
Severity: Medium
Disable DHCP Service
22
Rule
Severity: Low
Uninstall bind Package
13
Rule
Severity: Medium
Disable named Service
12
Rule
Severity: Medium
Disable vsftpd Service
12
Rule
Severity: Unknown
Disable httpd Service
14
Rule
Severity: Unknown
Disable Network File System (nfs)
27
Rule
Severity: High
Remove Rsh Trust Files
14
Rule
Severity: Unknown
Disable the CUPS Service
30
Rule
Severity: Medium
Disable Host-Based Authentication
29
Rule
Severity: Medium
Disable Compression Or Set Compression to delayed
29
Rule
Severity: High
Disable SSH Access via Empty Passwords
29
Rule
Severity: Medium
Disable GSSAPI Authentication
29
Rule
Severity: Medium
Disable Kerberos Authentication
30
Rule
Severity: Medium
Disable SSH Support for .rhosts Files
29
Rule
Severity: Medium
Disable SSH Support for Rhosts RSA Authentication
30
Rule
Severity: Medium
Disable SSH Root Login
30
Rule
Severity: Medium
Disable SSH Support for User Known Hosts
29
Rule
Severity: Medium
Do Not Allow SSH Environment Options
16
Rule
Severity: Medium
Ensure rsyslog Does Not Accept Remote Messages Unless Acting As Log Server
5
Rule
Severity: Medium
Disable Client Dynamic DNS Updates
6
Rule
Severity: Unknown
Disable Zeroconf Networking
13
Rule
Severity: Medium
Ensure System is Not Acting as a Network Sniffer
11
Rule
Severity: Medium
Configure the Firewalld Ports
14
Rule
Severity: Medium
Set Default firewalld Zone for Incoming Packets
9
Rule
Severity: Unknown
Disable Support for RPC IPv6
10
Rule
Severity: Medium
Disable Bluetooth Service
13
Rule
Severity: Medium
Disable Bluetooth Kernel Module
7
Rule
Severity: Unknown
Disable WiFi or Bluetooth in BIOS
7
Rule
Severity: Unknown
Disable Booting from USB Devices in Boot Firmware
18
Rule
Severity: Low
Disable Mounting of cramfs
15
Rule
Severity: Low
Disable Mounting of freevxfs
14
Rule
Severity: Low
Disable Mounting of hfs
14
Rule
Severity: Low
Disable Mounting of hfsplus
15
Rule
Severity: Low
Disable Mounting of jffs2
14
Rule
Severity: Low
Disable Mounting of squashfs
14
Rule
Severity: Low
Disable Mounting of udf
19
Rule
Severity: Medium
Disable Modprobe Loading of USB Storage Driver
12
Rule
Severity: Low
Disable Mounting of vFAT filesystems
12
Rule
Severity: Medium
Add nodev Option to /boot
14
Rule
Severity: Medium
Add nosuid Option to /boot
17
Rule
Severity: Medium
Add noexec Option to /dev/shm
16
Rule
Severity: Medium
Add nosuid Option to /home
14
Rule
Severity: Medium
Add nodev Option to Non-Root Local Partitions
17
Rule
Severity: Medium
Add nodev Option to Removable Media Partitions
17
Rule
Severity: Medium
Add noexec Option to Removable Media Partitions
16
Rule
Severity: Medium
Add nosuid Option to Removable Media Partitions
17
Rule
Severity: Medium
Add nodev Option to /tmp
16
Rule
Severity: Medium
Add noexec Option to /tmp
17
Rule
Severity: Medium
Add nosuid Option to /tmp
13
Rule
Severity: Medium
Add nodev Option to /var/log/audit
13
Rule
Severity: Medium
Add noexec Option to /var/log/audit
13
Rule
Severity: Medium
Add nosuid Option to /var/log/audit
13
Rule
Severity: Medium
Add nodev Option to /var/log
15
Rule
Severity: Medium
Add noexec Option to /var/log
15
Rule
Severity: Medium
Add nosuid Option to /var/log
13
Rule
Severity: Medium
Add nodev Option to /var
10
Rule
Severity: Unknown
Bind Mount /var/tmp To /tmp
11
Rule
Severity: Medium
Ensure No Device Files are Unlabeled by SELinux
17
Rule
Severity: Medium
Ensure No Daemons are Unconfined by SELinux
5
Rule
Severity: Medium
Prevent Other Programs from Using Avahi's Port
5
Rule
Severity: Low
Restrict Information Published by Avahi
9
Rule
Severity: Medium
Uninstall avahi-autoipd Server Package
11
Rule
Severity: Medium
Uninstall avahi Server Package
3
Rule
Severity: Low
Enable IRQ Balance (irqbalance)
5
Rule
Severity: Medium
Disable Advanced Configuration and Power Interface (acpid)
5
Rule
Severity: Low
Disable Certmonger Service (certmonger)
3
Rule
Severity: Low
Disable Control Group Config (cgconfig)
3
Rule
Severity: Low
Disable Control Group Rules Engine (cgred)
5
Rule
Severity: Low
Disable CPU Speed (cpupower)
15
Rule
Severity: Medium
Disable KDump Kernel Crash Analyzer (kdump)
5
Rule
Severity: Low
Disable Software RAID Monitor (mdmonitor)
3
Rule
Severity: Low
Disable D-Bus IPC Service (messagebus)
5
Rule
Severity: Low
Disable Network Console (netconsole)
13
Rule
Severity: Low
Disable ntpdate Service (ntpdate)
13
Rule
Severity: Medium
Disable Odd Job Daemon (oddjobd)
5
Rule
Severity: Low
Disable Portreserve (portreserve)
5
Rule
Severity: Low
Disable Quota Netlink (quota_nld)
7
Rule
Severity: Low
Disable Red Hat Network Service (rhnsd)
5
Rule
Severity: Low
Disable Red Hat Subscription Manager Daemon (rhsmcertd)
5
Rule
Severity: Low
Disable Cyrus SASL Authentication Daemon (saslauthd)
3
Rule
Severity: Low
Disable SMART Disk Monitoring Service (smartd)
5
Rule
Severity: Low
Disable System Statistics Reset Service (sysstat)
6
Rule
Severity: Unknown
Disable anacron Service
5
Rule
Severity: Unknown
Deny BOOTP Queries
5
Rule
Severity: Unknown
Deny Decline Messages
5
Rule
Severity: Unknown
Do Not Use Dynamic DNS
15
Rule
Severity: Medium
Uninstall DHCP Server Package
5
Rule
Severity: Medium
Authenticate Zone Transfers
16
Rule
Severity: High
Uninstall vsftpd Package
6
Rule
Severity: Medium
Restrict Access to Anonymous Users if Possible
13
Rule
Severity: Unknown
Uninstall httpd Package
5
Rule
Severity: Medium
Set Permissions on the /var/log/httpd/ Directory
7
Rule
Severity: Unknown
Set Permissions on All Configuration Files Inside /etc/httpd/conf.d/
7
Rule
Severity: Unknown
Set Permissions on All Configuration Files Inside /etc/httpd/conf/
7
Rule
Severity: Unknown
Set Permissions on All Configuration Files Inside /etc/httpd/conf.modules.d/
5
Rule
Severity: Unknown
Set httpd ServerSignature Directive to Off
5
Rule
Severity: Unknown
Set httpd ServerTokens Directive to Prod
14
Rule
Severity: Low
Uninstall openldap-servers Package
14
Rule
Severity: Medium
Uninstall Sendmail Package
16
Rule
Severity: Medium
Disable Postfix Network Listening
10
Rule
Severity: Medium
Mount Remote Filesystems with Kerberos Security
6
Rule
Severity: Unknown
Restrict NFS Clients to Privileged Ports
12
Rule
Severity: Medium
Use Kerberos Security on All Exports
17
Rule
Severity: Low
Uninstall xinetd Package
13
Rule
Severity: Medium
Disable xinetd Service
14
Rule
Severity: High
Uninstall ypserv Package
8
Rule
Severity: Medium
Disable ypbind Service
16
Rule
Severity: High
Uninstall rsh-server Package
9
Rule
Severity: High
Disable rexec Service
12
Rule
Severity: High
Disable rlogin Service
8
Rule
Severity: High
Disable rsh Service
15
Rule
Severity: High
Uninstall telnet-server Package
12
Rule
Severity: High
Disable telnet Service
15
Rule
Severity: High
Uninstall tftp-server Package
6
Rule
Severity: High
Disable tftp Service
12
Rule
Severity: Unknown
Uninstall CUPS Package
5
Rule
Severity: Unknown
Disable Printer Browsing Entirely if Possible
5
Rule
Severity: Unknown
Disable Print Server Capabilities
10
Rule
Severity: Low
Uninstall quagga Package
9
Rule
Severity: Medium
Disable Quagga Service
11
Rule
Severity: Medium
Enable SSH Server firewalld Firewall Exception
7
Rule
Severity: High
Configure SSSD LDAP Backend to Use TLS For All Transactions
18
Rule
Severity: Medium
Remove the X Windows Package Group
14
Rule
Severity: Medium
Disable X Windows Startup By Setting Default Target
6
Rule
Severity: Medium
Disable Kernel cfg80211 Module
6
Rule
Severity: Medium
Disable Kernel iwlmvm Module
6
Rule
Severity: Medium
Disable Kernel iwlwifi Module
6
Rule
Severity: Medium
Disable Kernel mac80211 Module
10
Rule
Severity: Unknown
Uninstall nginx Package
2
Rule
Severity: Medium
Uninstall DHCP Client Package
2
Rule
Severity: Low
Uninstall tcpd Package
1
Rule
Severity: Medium
Install firewalld Package
8
Rule
Severity: Low
Uninstall 389-ds-base Package
Patternfly
PatternFly elements
The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.
Modules