Skip to content

No profile (default benchmark)

Rules and Groups employed by this XCCDF Profile

  • SRG-APP-000175

    Group
  • Check for publishers certificate revocation must be enforced.

    Check for publisher's certificate revocation options should be enforced to ensure all PKI signed objects are validated. Satisfies: SRG-APP-000605
    Rule Low Severity
  • SRG-APP-000209

    Group
  • The Download signed ActiveX controls property must be disallowed (Internet zone).

    Active X controls can contain potentially malicious code and must only be allowed to be downloaded from trusted sites. Signed code is better than unsigned code in that it may be easier to determine...
    Rule Medium Severity
  • SRG-APP-000209

    Group
  • The Download unsigned ActiveX controls property must be disallowed (Internet zone).

    Unsigned code is potentially harmful, especially when coming from an untrusted zone. This policy setting allows you to manage whether users may download unsigned ActiveX controls from the zone. If ...
    Rule Medium Severity
  • SRG-APP-000210

    Group
  • The Initialize and script ActiveX controls not marked as safe property must be disallowed (Internet zone).

    ActiveX controls that are not marked safe for scripting should not be executed. Although this is not a complete security measure for a control to be marked safe for scripting, if a control is not m...
    Rule Medium Severity
  • SRG-APP-000141

    Group
  • The Java permissions must be disallowed (Internet zone).

    Java applications could contain malicious code; sites located in this security zone are more likely to be hosted by malicious individuals. This policy setting allows you to manage permissions for J...
    Rule Medium Severity

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules