SRG-OS-000324-GPOS-00125

The operating system must prevent nonprivileged users from executing privileged functions to include disabling, circumventing, or altering implemented security safeguards/countermeasures.

Details
Associations

23 rules found Severity: Medium

31 rules found Severity: Medium

17 rules found Severity: Medium

17 rules found Severity: High

20 rules found Severity: High

33 rules found Severity: Medium

4 rules found Severity: Medium

11 rules found Severity: Medium

16 rules found Severity: Medium

10 rules found Severity: Low

10 rules found Severity: Medium

8 rules found Severity: Medium

10 rules found Severity: Medium

SRG-OS-000324-GPOS-00125

Install sudo Package

Restrict Virtual Console Root Logins

Disable debug-shell SystemD Service

Disable Ctrl-Alt-Del Burst Action

Disable Ctrl-Alt-Del Reboot Activation

Enable Kernel Parameter to Enforce DAC on Hardlinks

Enable Kernel Parameter to Enforce DAC on Symlinks

Confine SELinux Users To Roles That Conform To Least Privilege

Elevate The SELinux Context When An Administrator Calls The Sudo Command

Map System Users To The Appropriate SELinux Role

Disable the ssh_sysadm_login SELinux Boolean

Prevent user from disabling the screen lock

Ensure AppArmor is installed

Install the pam_apparmor Package

Ensure AppArmor is Active and Configured