Skip to content
Log In

II - Mission Support Classified

Rules and Groups employed by this XCCDF Profile

  • SRG-APP-000175

    Group
    Show

  • Check for publishers certificate revocation must be enforced.

    Check for publisher's certificate revocation options should be enforced to ensure all PKI signed objects are validated. Satisfies: SRG-APP-000605
    Rule Low Severity
    Show

  • SRG-APP-000209

    Group
    Show

  • The Download signed ActiveX controls property must be disallowed (Internet zone).

    Active X controls can contain potentially malicious code and must only be allowed to be downloaded from trusted sites. Signed code is better than unsigned code in that it may be easier to determine...
    Rule Medium Severity
    Show

  • SRG-APP-000209

    Group
    Show

  • The Download unsigned ActiveX controls property must be disallowed (Internet zone).

    Unsigned code is potentially harmful, especially when coming from an untrusted zone. This policy setting allows you to manage whether users may download unsigned ActiveX controls from the zone. If ...
    Rule Medium Severity
    Show

  • SRG-APP-000210

    Group
    Show

  • The Initialize and script ActiveX controls not marked as safe property must be disallowed (Internet zone).

    ActiveX controls that are not marked safe for scripting should not be executed. Although this is not a complete security measure for a control to be marked safe for scripting, if a control is not m...
    Rule Medium Severity
    Show

  • SRG-APP-000141

    Group
    Show

  • The Java permissions must be disallowed (Internet zone).

    Java applications could contain malicious code; sites located in this security zone are more likely to be hosted by malicious individuals. This policy setting allows you to manage permissions for J...
    Rule Medium Severity
    Show

  • SRG-APP-000039

    Group
    Show

  • Accessing data sources across domains must be disallowed (Internet zone).

    The ability to access data zones across domains could cause the user to unknowingly access content hosted on an unauthorized server. Access to data sources across multiple domains must be controlle...
    Rule Medium Severity
    Show

  • SRG-APP-000141

    Group
    Show

  • Functionality to drag and drop or copy and paste files must be disallowed (Internet zone).

    Content hosted on sites located in the Internet zone are likely to contain malicious payloads and therefore this feature should be blocked for this zone. Drag and drop or copy and paste files must ...
    Rule Medium Severity
    Show

  • SRG-APP-000141

    Group
    Show

  • Launching programs and files in IFRAME must be disallowed (Internet zone).

    This policy setting allows you to manage whether applications may be run and files may be downloaded from an IFRAME reference in the HTML of the pages in this zone. Launching of programs in IFRAME ...
    Rule Medium Severity
    Show

  • SRG-APP-000039

    Group
    Show

  • Navigating windows and frames across different domains must be disallowed (Internet zone).

    Frames that navigate across different domains are a security concern, because the user may think they are accessing pages on one site while they are actually accessing pages on another site. It is ...
    Rule Medium Severity
    Show

  • SRG-APP-000231

    Group
    Show

  • Userdata persistence must be disallowed (Internet zone).

    Userdata persistence must have a level of protection based upon the site being accessed. It is possible for sites hosting malicious content to exploit this feature as part of an attack against visi...
    Rule Medium Severity
    Show

Node 2

siemur/test-space

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules