Skip to content
ATO Pathways
  Log In

Canonical Ubuntu 18.04 LTS Security Technical Implementation Guide

Rules, Groups, and Values defined within the XCCDF Benchmark

  • SRG-OS-000163-GPOS-00072

    <GroupDescription></GroupDescription>
    Group
    Show

  • The Ubuntu operating system must automatically terminate all network connections associated with SSH traffic at the end of the session or after 10 minutes of inactivity.

    &lt;VulnDiscussion&gt;Automatic session termination addresses the termination of user-initiated logical sessions in contrast to the termination of ...
    Rule Medium Severity
    Show

  • SRG-OS-000250-GPOS-00093

    <GroupDescription></GroupDescription>
    Group
    Show

  • The Ubuntu operating system must configure the SSH daemon to only use Message Authentication Codes (MACs) employing FIPS 140-2 approved cryptographic hash algorithms to protect the integrity of nonlocal maintenance and diagnostic communications.

    &lt;VulnDiscussion&gt;Without cryptographic integrity protections, information can be altered by unauthorized users without detection. Nonlocal ma...
    Rule Medium Severity
    Show

  • SRG-OS-000423-GPOS-00187

    <GroupDescription></GroupDescription>
    Group
    Show

  • The Ubuntu operating system must use SSH to protect the confidentiality and integrity of transmitted information unless otherwise protected by alternative physical safeguards, such as, at a minimum, a Protected Distribution System (PDS).

    &lt;VulnDiscussion&gt;Without protection of the transmitted information, confidentiality and integrity may be compromised because unprotected commu...
    Rule High Severity
    Show

  • SRG-OS-000480-GPOS-00229

    <GroupDescription></GroupDescription>
    Group
    Show

  • The Ubuntu operating system must not allow unattended or automatic login via ssh.

    &lt;VulnDiscussion&gt;Failure to restrict system access to authenticated users negatively impacts Ubuntu operating system security.&lt;/VulnDiscuss...
    Rule High Severity
    Show

  • SRG-OS-000066-GPOS-00034

    <GroupDescription></GroupDescription>
    Group
    Show

  • The Ubuntu operating system, for PKI-based authentication, must validate certificates by constructing a certification path (which includes status information) to an accepted trust anchor.

    &lt;VulnDiscussion&gt;Without path validation, an informed trust decision by the relying party cannot be made when presented with any certificate n...
    Rule Medium Severity
    Show

  • SRG-OS-000068-GPOS-00036

    <GroupDescription></GroupDescription>
    Group
    Show

  • The Ubuntu operating system must map the authenticated identity to the user or group account for PKI-based authentication.

    &lt;VulnDiscussion&gt;Without mapping the certificate used to authenticate to the user account, the ability to determine the identity of the indivi...
    Rule High Severity
    Show

  • SRG-OS-000105-GPOS-00052

    <GroupDescription></GroupDescription>
    Group
    Show

  • The Ubuntu operating system must implement smart card logins for multifactor authentication for access to accounts.

    &lt;VulnDiscussion&gt;Without the use of multifactor authentication, the ease of access to privileged functions is greatly increased. Multifactor ...
    Rule Medium Severity
    Show

  • SRG-OS-000375-GPOS-00160

    <GroupDescription></GroupDescription>
    Group
    Show

  • The Ubuntu operating system must implement multifactor authentication for remote access to privileged accounts in such a way that one of the factors is provided by a device separate from the system gaining access.

    &lt;VulnDiscussion&gt;Using an authentication device, such as a CAC or token that is separate from the information system, ensures that even if the...
    Rule Medium Severity
    Show

  • SRG-OS-000376-GPOS-00161

    <GroupDescription></GroupDescription>
    Group
    Show

  • The Ubuntu operating system must accept Personal Identity Verification (PIV) credentials.

    &lt;VulnDiscussion&gt;The use of PIV credentials facilitates standardization and reduces the risk of unauthorized access. DoD has mandated the use...
    Rule Medium Severity
    Show

  • SRG-OS-000377-GPOS-00162

    <GroupDescription></GroupDescription>
    Group
    Show

  • The Ubuntu operating system must implement certificate status checking for multifactor authentication.

    &lt;VulnDiscussion&gt;The use of PIV credentials facilitates standardization and reduces the risk of unauthorized access. DoD has mandated the use...
    Rule Medium Severity
    Show

Node 2

siemur/test-space

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules