Skip to content
ATO Pathways
  Log In

III - Administrative Sensitive

Rules and Groups employed by this XCCDF Profile

  • SRG-OS-000373-GPOS-00156

    <GroupDescription></GroupDescription>
    Group
    Show

  • OL 8 must require users to reauthenticate for privilege escalation and changing roles.

    &lt;VulnDiscussion&gt;Without reauthentication, users may access resources or perform tasks for which they do not have authorization. When operati...
    Rule Medium Severity
    Show

  • SRG-OS-000480-GPOS-00227

    <GroupDescription></GroupDescription>
    Group
    Show

  • OL 8 must restrict privilege elevation to authorized personnel.

    &lt;VulnDiscussion&gt;The sudo command allows a user to execute programs with elevated (administrator) privileges. It prompts the user for their pa...
    Rule Medium Severity
    Show

  • SRG-OS-000480-GPOS-00227

    <GroupDescription></GroupDescription>
    Group
    Show

  • OL 8 must use the invoking user's password for privilege escalation when using "sudo".

    &lt;VulnDiscussion&gt;The sudoers security policy requires that users authenticate themselves before they can use sudo. When sudoers requires authe...
    Rule Medium Severity
    Show

  • SRG-OS-000373-GPOS-00156

    <GroupDescription></GroupDescription>
    Group
    Show

  • OL 8 must require re-authentication when using the "sudo" command.

    &lt;VulnDiscussion&gt;Without re-authentication, users may access resources or perform tasks for which they do not have authorization. When opera...
    Rule Medium Severity
    Show

  • SRG-OS-000375-GPOS-00160

    <GroupDescription></GroupDescription>
    Group
    Show

  • OL 8 must have the package required for multifactor authentication installed.

    &lt;VulnDiscussion&gt;Using an authentication device, such as a DoD Common Access Card (CAC) or token that is separate from the information system,...
    Rule Low Severity
    Show

  • SRG-OS-000375-GPOS-00160

    <GroupDescription></GroupDescription>
    Group
    Show

  • OL 8 must implement certificate status checking for multifactor authentication.

    &lt;VulnDiscussion&gt;Using an authentication device, such as a DoD Common Access Card (CAC) or token that is separate from the information system,...
    Rule Medium Severity
    Show

  • SRG-OS-000376-GPOS-00161

    <GroupDescription></GroupDescription>
    Group
    Show

  • OL 8 must accept Personal Identity Verification (PIV) credentials.

    &lt;VulnDiscussion&gt;The use of PIV credentials facilitates standardization and reduces the risk of unauthorized access. The DoD has mandated t...
    Rule Medium Severity
    Show

  • SRG-OS-000433-GPOS-00192

    <GroupDescription></GroupDescription>
    Group
    Show

  • OL 8 must implement non-executable data to protect its memory from unauthorized code execution.

    &lt;VulnDiscussion&gt;Some adversaries launch attacks with the intent of executing code in non-executable regions of memory or in memory locations ...
    Rule Medium Severity
    Show

  • SRG-OS-000134-GPOS-00068

    <GroupDescription></GroupDescription>
    Group
    Show

  • OL 8 must clear the page allocator to prevent use-after-free attacks.

    &lt;VulnDiscussion&gt;Adversaries may launch attacks with the intent of executing code in non-executable regions of memory or in memory locations t...
    Rule Medium Severity
    Show

  • SRG-OS-000134-GPOS-00068

    <GroupDescription></GroupDescription>
    Group
    Show

  • OL 8 must disable virtual syscalls.

    &lt;VulnDiscussion&gt;Syscalls are special routines in the Linux kernel, which userspace applications ask to do privileged tasks. Invoking a system...
    Rule Medium Severity
    Show

Node 2

siemur/test-space

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules