Guide to the Secure Configuration of Alibaba Cloud Linux 2

Rules, Groups, and Values defined within the XCCDF Benchmark

samba_share_nfs SELinux Boolean

default - Default SELinux boolean setting.
on - SELinux boolean is enabled.
off - SELinux boolean is disabled.

Value

Show

sanlock_use_fusefs SELinux Boolean

default - Default SELinux boolean setting.
on - SELinux boolean is enabled.
off - SELinux boolean is disabled.

Value

Show

sanlock_use_nfs SELinux Boolean

default - Default SELinux boolean setting.
on - SELinux boolean is enabled.
off - SELinux boolean is disabled.

Value

Show

sanlock_use_samba SELinux Boolean

default - Default SELinux boolean setting.
on - SELinux boolean is enabled.
off - SELinux boolean is disabled.

Value

Show

saslauthd_read_shadow SELinux Boolean

default - Default SELinux boolean setting.
on - SELinux boolean is enabled.
off - SELinux boolean is disabled.

Value

Show

secadm_exec_content SELinux Boolean

default - Default SELinux boolean setting.
on - SELinux boolean is enabled.
off - SELinux boolean is disabled.

Value

Show

secure_mode SELinux Boolean

default - Default SELinux boolean setting.
on - SELinux boolean is enabled.
off - SELinux boolean is disabled.

Value

Show

secure_mode_insmod SELinux Boolean

default - Default SELinux boolean setting.
on - SELinux boolean is enabled.
off - SELinux boolean is disabled.

Value

Show

secure_mode_policyload SELinux Boolean

default - Default SELinux boolean setting.
on - SELinux boolean is enabled.
off - SELinux boolean is disabled.

Value

Show

selinuxuser_direct_dri_enabled SELinux Boolean

default - Default SELinux boolean setting.
on - SELinux boolean is enabled.
off - SELinux boolean is disabled.

Value

Show

selinuxuser_execheap SELinux Boolean

default - Default SELinux boolean setting.
on - SELinux boolean is enabled.
off - SELinux boolean is disabled.

Value

Show

selinuxuser_execmod SELinux Boolean

default - Default SELinux boolean setting.
on - SELinux boolean is enabled.
off - SELinux boolean is disabled.

Value

Show

selinuxuser_execstack SELinux Boolean

default - Default SELinux boolean setting.
on - SELinux boolean is enabled.
off - SELinux boolean is disabled.

Value

Show

selinuxuser_mysql_connect_enabled SELinux Boolean

default - Default SELinux boolean setting.
on - SELinux boolean is enabled.
off - SELinux boolean is disabled.

Value

Show

selinuxuser_ping SELinux Boolean

default - Default SELinux boolean setting.
on - SELinux boolean is enabled.
off - SELinux boolean is disabled.

Value

Show

selinuxuser_postgresql_connect_enabled SELinux Boolean

default - Default SELinux boolean setting.
on - SELinux boolean is enabled.
off - SELinux boolean is disabled.

Value

Show

selinuxuser_rw_noexattrfile SELinux Boolean

default - Default SELinux boolean setting.
on - SELinux boolean is enabled.
off - SELinux boolean is disabled.

Value

Show

selinuxuser_share_music SELinux Boolean

default - Default SELinux boolean setting.
on - SELinux boolean is enabled.
off - SELinux boolean is disabled.

Value

Show

selinuxuser_tcp_server SELinux Boolean

default - Default SELinux boolean setting.
on - SELinux boolean is enabled.
off - SELinux boolean is disabled.

Value

Show

selinuxuser_udp_server SELinux Boolean

default - Default SELinux boolean setting.
on - SELinux boolean is enabled.
off - SELinux boolean is disabled.

Value

Show

selinuxuser_use_ssh_chroot SELinux Boolean

default - Default SELinux boolean setting.
on - SELinux boolean is enabled.
off - SELinux boolean is disabled.

Value

Show

sge_domain_can_network_connect SELinux Boolean

default - Default SELinux boolean setting.
on - SELinux boolean is enabled.
off - SELinux boolean is disabled.

Value

Show

sge_use_nfs SELinux Boolean

default - Default SELinux boolean setting.
on - SELinux boolean is enabled.
off - SELinux boolean is disabled.

Value

Show

smartmon_3ware SELinux Boolean

default - Default SELinux boolean setting.
on - SELinux boolean is enabled.
off - SELinux boolean is disabled.

Value

Show

smbd_anon_write SELinux Boolean

default - Default SELinux boolean setting.
on - SELinux boolean is enabled.
off - SELinux boolean is disabled.

Value

Show

spamassassin_can_network SELinux Boolean

default - Default SELinux boolean setting.
on - SELinux boolean is enabled.
off - SELinux boolean is disabled.

Value

Show

spamd_enable_home_dirs SELinux Boolean

default - Default SELinux boolean setting.
on - SELinux boolean is enabled.
off - SELinux boolean is disabled.

Value

Show

squid_connect_any SELinux Boolean

default - Default SELinux boolean setting.
on - SELinux boolean is enabled.
off - SELinux boolean is disabled.

Value

Show

squid_use_tproxy SELinux Boolean

default - Default SELinux boolean setting.
on - SELinux boolean is enabled.
off - SELinux boolean is disabled.

Value

Show

ssh_chroot_rw_homedirs SELinux Boolean

default - Default SELinux boolean setting.
on - SELinux boolean is enabled.
off - SELinux boolean is disabled.

Value

Show

ssh_keysign SELinux Boolean

default - Default SELinux boolean setting.
on - SELinux boolean is enabled.
off - SELinux boolean is disabled.

Value

Show

ssh_sysadm_login SELinux Boolean

default - Default SELinux boolean setting.
on - SELinux boolean is enabled.
off - SELinux boolean is disabled.

Value

Show

staff_exec_content SELinux Boolean

default - Default SELinux boolean setting.
on - SELinux boolean is enabled.
off - SELinux boolean is disabled.

Value

Show

staff_use_svirt SELinux Boolean

default - Default SELinux boolean setting.
on - SELinux boolean is enabled.
off - SELinux boolean is disabled.

Value

Show

swift_can_network SELinux Boolean

default - Default SELinux boolean setting.
on - SELinux boolean is enabled.
off - SELinux boolean is disabled.

Value

Show

sysadm_exec_content SELinux Boolean

default - Default SELinux boolean setting.
on - SELinux boolean is enabled.
off - SELinux boolean is disabled.

Value

Show

telepathy_connect_all_ports SELinux Boolean

default - Default SELinux boolean setting.
on - SELinux boolean is enabled.
off - SELinux boolean is disabled.

Value

Show

telepathy_tcp_connect_generic_network_ports SELinux Boolean

default - Default SELinux boolean setting.
on - SELinux boolean is enabled.
off - SELinux boolean is disabled.

Value

Show

tftp_anon_write SELinux Boolean

default - Default SELinux boolean setting.
on - SELinux boolean is enabled.
off - SELinux boolean is disabled.

Value

Show

tftp_home_dir SELinux Boolean

default - Default SELinux boolean setting.
on - SELinux boolean is enabled.
off - SELinux boolean is disabled.

Value

Show

tmpreaper_use_nfs SELinux Boolean

default - Default SELinux boolean setting.
on - SELinux boolean is enabled.
off - SELinux boolean is disabled.

Value

Show

tmpreaper_use_samba SELinux Boolean

default - Default SELinux boolean setting.
on - SELinux boolean is enabled.
off - SELinux boolean is disabled.

Value

Show

tor_bind_all_unreserved_ports SELinux Boolean

default - Default SELinux boolean setting.
on - SELinux boolean is enabled.
off - SELinux boolean is disabled.

Value

Show

tor_can_network_relay SELinux Boolean

default - Default SELinux boolean setting.
on - SELinux boolean is enabled.
off - SELinux boolean is disabled.

Value

Show

unconfined_chrome_sandbox_transition SELinux Boolean

default - Default SELinux boolean setting.
on - SELinux boolean is enabled.
off - SELinux boolean is disabled.

Value

Show

unconfined_login SELinux Boolean

default - Default SELinux boolean setting.
on - SELinux boolean is enabled.
off - SELinux boolean is disabled.

Value

Show

unconfined_mozilla_plugin_transition SELinux Boolean

default - Default SELinux boolean setting.
on - SELinux boolean is enabled.
off - SELinux boolean is disabled.

Value

Show

unprivuser_use_svirt SELinux Boolean

default - Default SELinux boolean setting.
on - SELinux boolean is enabled.
off - SELinux boolean is disabled.

Value

Show

use_ecryptfs_home_dirs SELinux Boolean

default - Default SELinux boolean setting.
on - SELinux boolean is enabled.
off - SELinux boolean is disabled.

Value

Show

use_fusefs_home_dirs SELinux Boolean

default - Default SELinux boolean setting.
on - SELinux boolean is enabled.
off - SELinux boolean is disabled.

Value

Show

Node 2

siemur/test-space

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity

Modules