Skip to content

Guide to the Secure Configuration of SUSE Linux Enterprise 15

Rules, Groups, and Values defined within the XCCDF Benchmark

  • Verify that local /var/log/messages is not world-readable

    Files containing sensitive informations should be protected by restrictive permissions. Most of the time, there is no need that these files need to...
    Rule Medium Severity
  • Verify Permissions of Local Logs of audit Tools

    The SUSE operating system audit tools must have the proper permissions configured to protect against unauthorized access. Check that "permissions....
    Rule Medium Severity
  • Verify that Local Logs of the audit Daemon are not World-Readable

    Files containing sensitive informations should be protected by restrictive permissions. Most of the time, there is no need that these files need to...
    Rule Medium Severity
  • Restrict Programs from Dangerous Execution Patterns

    The recommendations in this section are designed to ensure that the system's features to protect against potentially dangerous program execution ar...
    Group
  • kernel.unprivileged_bpf_disabled

    Prevent unprivileged processes from using the bpf() syscall.
    Value

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules