Skip to content

Guide to the Secure Configuration of Kylin Server 10

Rules, Groups, and Values defined within the XCCDF Benchmark

  • Ensure SELinux is Not Disabled

    The SELinux state should be set to <code>enforcing</code> or <code>permissive</code> at system boot time. In the file <code>/etc/selinux/config</co...
    Rule High Severity
  • Services

    The best protection against vulnerable software is running less software. This section describes how to review the software which Kylin Server 10 i...
    Group
  • Base Services

    This section addresses the base services that are installed on a Kylin Server 10 default installation which are not covered in other sections. Some...
    Group
  • Install the psacct package

    The process accounting service, <code>psacct</code>, works with programs including <code>acct</code> and <code>ac</code> to allow system administra...
    Rule Low Severity
  • Enable Process Accounting (psacct)

    The process accounting service, <code>psacct</code>, works with programs including <code>acct</code> and <code>ac</code> to allow system administra...
    Rule Low Severity

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules