CM-7(b)

15 rules found Severity: Medium

13 rules found Severity: High

10 rules found Severity: High

14 rules found Severity: Medium

14 rules found Severity: Low

10 rules found

16 rules found Severity: High

26 rules found Severity: Medium

30 rules found Severity: Medium

29 rules found Severity: Medium

30 rules found Severity: Medium

29 rules found Severity: Medium

22 rules found Severity: Medium

27 rules found Severity: Medium

24 rules found Severity: Medium

23 rules found Severity: Medium

29 rules found Severity: Medium

28 rules found Severity: Medium

24 rules found

29 rules found Severity: Medium

28 rules found Severity: Medium

24 rules found

27 rules found Severity: Medium

28 rules found

29 rules found Severity: Medium

30 rules found Severity: Medium

28 rules found Severity: Medium

24 rules found Severity: Medium

31 rules found Severity: Low

26 rules found Severity: Medium

32 rules found Severity: Low

24 rules found Severity: Medium

27 rules found Severity: Medium

30 rules found Severity: Medium

29 rules found Severity: Low

22 rules found Severity: Medium

15 rules found Severity: Low

15 rules found Severity: Medium

16 rules found Severity: Medium

29 rules found Severity: High

29 rules found

14 rules found Severity: Medium

25 rules found Severity: Low

13 rules found Severity: Medium

12 rules found Severity: Medium

12 rules found

18 rules found

30 rules found Severity: High

16 rules found

34 rules found Severity: Medium

31 rules found Severity: Medium

34 rules found Severity: High

31 rules found Severity: Medium

34 rules found Severity: Medium

31 rules found Severity: Medium

36 rules found Severity: Medium

33 rules found Severity: Medium

34 rules found Severity: Medium

19 rules found Severity: Medium

5 rules found Severity: Medium

6 rules found

16 rules found Severity: Medium

13 rules found Severity: Medium

18 rules found Severity: Medium

9 rules found

14 rules found Severity: Medium

15 rules found Severity: Medium

7 rules found

21 rules found Severity: Low

18 rules found Severity: Low

17 rules found Severity: Low

18 rules found Severity: Low

17 rules found Severity: Low

23 rules found Severity: Medium

12 rules found Severity: Low

14 rules found Severity: Medium

18 rules found Severity: Medium

20 rules found Severity: Medium

22 rules found Severity: Medium

18 rules found Severity: Medium

19 rules found Severity: Medium

20 rules found Severity: Medium

21 rules found Severity: Medium

22 rules found Severity: Medium

16 rules found Severity: Medium

20 rules found Severity: Medium

16 rules found Severity: Medium

10 rules found

14 rules found Severity: Medium

20 rules found Severity: Medium

5 rules found Severity: Medium

5 rules found Severity: Low

9 rules found Severity: Medium

12 rules found Severity: Medium

3 rules found Severity: Low

5 rules found Severity: Medium

5 rules found Severity: Low

3 rules found Severity: Low

5 rules found Severity: Low

18 rules found Severity: Medium

5 rules found Severity: Low

3 rules found Severity: Low

5 rules found Severity: Low

13 rules found Severity: Low

13 rules found Severity: Medium

5 rules found Severity: Low

7 rules found Severity: Low

5 rules found Severity: Low

3 rules found Severity: Low

5 rules found Severity: Low

6 rules found

5 rules found

18 rules found Severity: Medium

5 rules found Severity: Medium

19 rules found Severity: High

6 rules found Severity: Medium

16 rules found

5 rules found Severity: Medium

7 rules found

5 rules found

14 rules found Severity: Low

16 rules found Severity: Medium

21 rules found Severity: Medium

12 rules found Severity: Medium

6 rules found

14 rules found Severity: Medium

19 rules found Severity: Low

12 rules found Severity: Medium

15 rules found Severity: High

8 rules found Severity: Medium

18 rules found Severity: High

11 rules found Severity: High

14 rules found Severity: High

10 rules found Severity: High

22 rules found Severity: High

14 rules found Severity: High

21 rules found Severity: High

6 rules found Severity: High

13 rules found

5 rules found

11 rules found Severity: Low

9 rules found Severity: Medium

13 rules found Severity: Medium

11 rules found Severity: High

21 rules found Severity: Medium

16 rules found Severity: Medium

6 rules found Severity: Medium

13 rules found

2 rules found Severity: Medium

2 rules found Severity: Low

1 rule found Severity: Medium

8 rules found Severity: Low

Remove the GDM Package Group

Disable the GNOME3 Login Restart and Shutdown Buttons

Disable GDM Automatic Login

Disable GDM Guest Login

Disable GNOME3 Automounting

Disable GNOME3 Automount Opening

Disable GNOME3 Automount running

Disable All GNOME3 Thumbnailers

Disable Ctrl-Alt-Del Reboot Key Sequence in GNOME3

Verify firewalld Enabled

Verify ip6tables Enabled if Using IPv6

Verify iptables Enabled

Set Default ip6tables Policy for Incoming Packets

Set Default iptables Policy for Incoming Packets

Set Default iptables Policy for Forwarded Packets

Disable IPv6 Networking Support Automatic Loading

Disable IPv6 Addressing on All IPv6 Interfaces

Disable IPv6 Addressing on IPv6 Interfaces by Default

Configure Accepting Router Advertisements on All IPv6 Interfaces

Disable Accepting ICMP Redirects for All IPv6 Interfaces

Disable Kernel Parameter for Accepting Source-Routed Packets on all IPv6 Interfaces

Disable Kernel Parameter for IPv6 Forwarding

Disable Accepting Router Advertisements on all IPv6 Interfaces by Default

Disable Kernel Parameter for Accepting ICMP Redirects by Default on IPv6 Interfaces

Disable Kernel Parameter for Accepting Source-Routed Packets on IPv6 Interfaces by Default

Disable Accepting ICMP Redirects for All IPv4 Interfaces

Disable Kernel Parameter for Accepting Source-Routed Packets on all IPv4 Interfaces

Enable Kernel Parameter to Log Martian Packets on all IPv4 Interfaces

Enable Kernel Parameter to Use Reverse Path Filtering on all IPv4 Interfaces

Disable Kernel Parameter for Accepting Secure ICMP Redirects on all IPv4 Interfaces

Disable Kernel Parameter for Accepting ICMP Redirects by Default on IPv4 Interfaces

Disable Kernel Parameter for Accepting Source-Routed Packets on IPv4 Interfaces by Default

Enable Kernel Paremeter to Log Martian Packets on all IPv4 Interfaces by Default

Enable Kernel Parameter to Use Reverse Path Filtering on all IPv4 Interfaces by Default

Configure Kernel Parameter for Accepting Secure Redirects By Default

Enable Kernel Parameter to Ignore ICMP Broadcast Echo Requests on IPv4 Interfaces

Enable Kernel Parameter to Ignore Bogus ICMP Error Responses on IPv4 Interfaces

Enable Kernel Parameter to Use TCP Syncookies on Network Interfaces

Disable Kernel Parameter for Sending ICMP Redirects on all IPv4 Interfaces

Disable Kernel Parameter for Sending ICMP Redirects on all IPv4 Interfaces by Default

Disable Kernel Parameter for IP Forwarding on IPv4 Interfaces

Disable DCCP Support

Disable RDS Support

Disable SCTP Support

Disable TIPC Support

Deactivate Wireless Network Interfaces

Disable the Automounter

Add nodev Option to /dev/shm

Add nosuid Option to /dev/shm

Disable Avahi Publishing

Disable Avahi Server Software

Disable Apache Qpid (qpidd)

Disable Network Router Discovery Daemon (rdisc)

Disable At Service (atd)

Uninstall the inet-based telnet server

Uninstall the ssl compliant telnet server

Uninstall the telnet server

Minimize Served Information

Disable DHCP Service

Uninstall bind Package

Disable named Service

Disable vsftpd Service

Disable httpd Service

Disable Network File System (nfs)

Remove Rsh Trust Files

Disable the CUPS Service

Disable Host-Based Authentication

Disable Compression Or Set Compression to delayed

Disable SSH Access via Empty Passwords

Disable GSSAPI Authentication

Disable Kerberos Authentication

Disable SSH Support for .rhosts Files

Disable SSH Support for Rhosts RSA Authentication

Disable SSH Root Login

Disable SSH Support for User Known Hosts

Do Not Allow SSH Environment Options

Ensure rsyslog Does Not Accept Remote Messages Unless Acting As Log Server

Disable Client Dynamic DNS Updates

Disable Zeroconf Networking