Skip to content
Log In

Canonical Ubuntu 18.04 LTS Security Technical Implementation Guide

Rules, Groups, and Values defined within the XCCDF Benchmark

  • SRG-OS-000269-GPOS-00103

    Group
    Show

  • The Ubuntu operating system must be configured to preserve log records from failure events.

    Failure to a known state can address safety or security in accordance with the mission/business needs of the organization. Failure to a known secure state helps prevent a loss of confidentiality, i...
    Rule Medium Severity
    Show

  • SRG-OS-000297-GPOS-00115

    Group
    Show

  • SRG-OS-000342-GPOS-00133

    Group
    Show

  • The Ubuntu operating system audit event multiplexor must be configured to off-load audit logs onto a different system or storage media from the system being audited.

    Information stored in one location is vulnerable to accidental or incidental deletion or alteration. Off-loading is a common process in information systems with limited audit storage capacity.
    Rule Low Severity
    Show

  • SRG-OS-000383-GPOS-00166

    Group
    Show

  • The Ubuntu operating system must be configured such that Pluggable Authentication Module (PAM) prohibits the use of cached authentications after one day.

    If cached authentication information is out-of-date, the validity of the authentication information may be questionable.
    Rule Low Severity
    Show

  • SRG-OS-000480-GPOS-00226

    Group
    Show

  • The Ubuntu operating system must enforce a delay of at least 4 seconds between logon prompts following a failed logon attempt.

    Limiting the number of logon attempts over a certain time interval reduces the chances that an unauthorized user may gain access to an account.
    Rule Low Severity
    Show

  • SRG-OS-000480-GPOS-00227

    Group
    Show

  • The Ubuntu operating system must display the date and time of the last successful account logon upon logon.

    Configuring the Ubuntu operating system to implement organization-wide security implementation guides and security checklists ensures compliance with federal standards and establishes a common secu...
    Rule Low Severity
    Show

  • SRG-OS-000021-GPOS-00005

    Group
    Show

  • The Ubuntu operating system must be configured so that three consecutive invalid logon attempts by a user automatically locks the account until released by an administrator.

    By limiting the number of failed logon attempts, the risk of unauthorized system access via user password guessing, otherwise known as brute-force attacks, is reduced. Limits are imposed by locking...
    Rule Medium Severity
    Show

  • SRG-OS-000024-GPOS-00007

    Group
    Show

  • SRG-OS-000109-GPOS-00056

    Group
    Show

  • The Ubuntu operating system must prevent direct login into the root account.

    To assure individual accountability and prevent unauthorized access, organizational users must be individually identified and authenticated. A group authenticator is a generic account used by mult...
    Rule Medium Severity
    Show

  • SRG-OS-000134-GPOS-00068

    Group
    Show

  • The Ubuntu operating system must be configured so that only users who need access to security functions are part of the sudo group.

    An isolation boundary provides access control and protects the integrity of the hardware, software, and firmware that perform security functions. Security functions are the hardware, software, and...
    Rule High Severity
    Show

  • SRG-OS-000228-GPOS-00088

    Group
    Show

  • SRG-OS-000069-GPOS-00037

    Group
    Show

Node 2

siemur/test-space

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules