Skip to content

II - Mission Support Sensitive

Rules and Groups employed by this XCCDF Profile

  • SLEM 5 must use vlock to allow for session locking.

    A session lock is a temporary action taken when a user stops work and moves away from the immediate physical vicinity of the information system but does not want to log out because of the temporary...
    Rule Medium Severity
  • SRG-OS-000074-GPOS-00042

    Group
  • SLEM 5 must not have the telnet-server package installed.

    It is detrimental for SLEM 5 to provide, or install by default, functionality exceeding requirements or mission objectives. These unnecessary capabilities or services are often overlooked, and ther...
    Rule High Severity
  • SRG-OS-000480-GPOS-00227

    Group
  • A separate file system must be used for SLEM 5 user home directories (such as /home or an equivalent).

    The use of separate file systems for different paths can protect the system from failures resulting from a file system becoming full or failing.
    Rule Medium Severity

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules