I - Mission Critical Public
Rules and Groups employed by this XCCDF Profile
-
SRG-OS-000366-GPOS-00153
<GroupDescription></GroupDescription>Group -
The SUSE operating system tool zypper must have gpgcheck enabled.
<VulnDiscussion>Changes to any software components can have significant effects on the overall security of the SUSE operating system. This re...Rule Medium Severity -
SRG-OS-000437-GPOS-00194
<GroupDescription></GroupDescription>Group -
The SUSE operating system must remove all outdated software components after updated versions have been installed.
<VulnDiscussion>Previous versions of software components that are not removed from the information system after updates have been installed m...Rule Medium Severity -
SRG-OS-000378-GPOS-00163
<GroupDescription></GroupDescription>Group -
The SUSE operating system must disable the USB mass storage kernel module.
<VulnDiscussion>Without identifying devices, unidentified or unknown devices may be introduced, thereby facilitating malicious activity. Per...Rule Medium Severity -
SRG-OS-000114-GPOS-00059
<GroupDescription></GroupDescription>Group -
The SUSE operating system must disable the file system automounter unless required.
<VulnDiscussion>Automatically mounting file systems permits easy introduction of unknown devices, thereby facilitating malicious activity. S...Rule Medium Severity -
SRG-OS-000312-GPOS-00122
<GroupDescription></GroupDescription>Group -
The SUSE operating system Apparmor tool must be configured to control whitelisted applications and user home directory access control.
<VulnDiscussion>Using a whitelist provides a configuration management method for allowing the execution of only authorized software. Using on...Rule Medium Severity
Node 2
The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.