Skip to content

III - Administrative Sensitive

Rules and Groups employed by this XCCDF Profile

  • SRG-OS-000312-GPOS-00122

    <GroupDescription></GroupDescription>
    Group
  • Permissions for system files and directories must conform to minimum requirements.

    &lt;VulnDiscussion&gt;Changing the system's file and directory permissions allows the possibility of unauthorized and anonymous modification to the...
    Rule Medium Severity
  • SRG-OS-000095-GPOS-00049

    <GroupDescription></GroupDescription>
    Group
  • Internet Information System (IIS) or its subcomponents must not be installed on a workstation.

    &lt;VulnDiscussion&gt;IIS is not installed by default. Installation of Internet Information System (IIS) may allow unauthorized internet services t...
    Rule High Severity
  • SRG-OS-000096-GPOS-00050

    <GroupDescription></GroupDescription>
    Group
  • Simple Network Management Protocol (SNMP) must not be installed on the system.

    &lt;VulnDiscussion&gt;"SNMP" is not installed by default. Some protocols and services do not support required security features, such as encrypting...
    Rule Medium Severity
  • SRG-OS-000095-GPOS-00049

    <GroupDescription></GroupDescription>
    Group
  • Simple TCP/IP Services must not be installed on the system.

    &lt;VulnDiscussion&gt;"Simple TCP/IP Services" is not installed by default. Some protocols and services do not support required security features, ...
    Rule Medium Severity
  • SRG-OS-000096-GPOS-00050

    <GroupDescription></GroupDescription>
    Group
  • The Telnet Client must not be installed on the system.

    &lt;VulnDiscussion&gt;The "Telnet Client" is not installed by default. Some protocols and services do not support required security features, such ...
    Rule Medium Severity

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules