Skip to content
ATO Pathways
  Log In

Guide to the Secure Configuration of Red Hat Enterprise Linux 8

Rules, Groups, and Values defined within the XCCDF Benchmark

  • Enable Process Accounting (psacct)

    The process accounting service, <code>psacct</code>, works with programs including <code>acct</code> and <code>ac</code> to allow system administra...
    Rule Low Severity
    Show

  • Disable Automatic Bug Reporting Tool (abrtd)

    The Automatic Bug Reporting Tool (<code>abrtd</code>) daemon collects and reports crash data when an application crash is detected. Using a variety...
    Rule Medium Severity
    Show

  • Disable Advanced Configuration and Power Interface (acpid)

    The Advanced Configuration and Power Interface Daemon (<code>acpid</code>) dispatches ACPI events (such as power/reset button depressed) to userspa...
    Rule Medium Severity
    Show

  • Disable Certmonger Service (certmonger)

    Certmonger is a D-Bus based service that attempts to simplify interaction with certifying authorities on networks which use public-key infrastructu...
    Rule Low Severity
    Show

  • Disable Cockpit Management Server

    The Cockpit Management Server (<code>cockpit</code>) provides a web based login and management framework. The <code>cockpit</code> service can be ...
    Rule Medium Severity
    Show

  • Disable CPU Speed (cpupower)

    The <code>cpupower</code> service can adjust the clock speed of supported CPUs based upon the current processing load thereby conserving power and ...
    Rule Low Severity
    Show

  • Disable Dovecot Service

    The dovecot service can be disabled with the following command: 
    $ sudo systemctl mask --now dovecot.service
    Rule Unknown Severity
    Show

  • Disable KDump Kernel Crash Analyzer (kdump)

    The <code>kdump</code> service provides a kernel crash dump analyzer. It uses the <code>kexec</code> system call to boot a secondary kernel ("captu...
    Rule Medium Severity
    Show

  • Disable Software RAID Monitor (mdmonitor)

    The <code>mdmonitor</code> service is used for monitoring a software RAID array; hardware RAID setups do not use this service. The <code>mdmonitor...
    Rule Low Severity
    Show

  • Disable Network Console (netconsole)

    The <code>netconsole</code> service is responsible for loading the netconsole kernel module, which logs kernel printk messages over UDP to a syslog...
    Rule Low Severity
    Show

Node 2

siemur/test-space

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules