Skip to content

No profile (default benchmark)

Rules and Groups employed by this XCCDF Profile

  • SRG-OS-000378-GPOS-00163

    Group
  • The Ubuntu operating system must disable automatic mounting of Universal Serial Bus (USB) mass storage driver.

    Without authenticating devices, unidentified or unknown devices may be introduced, thereby facilitating malicious activity. Peripherals include, but are not limited to, such devices as flash drive...
    Rule Medium Severity
  • SRG-OS-000481-GPOS-00481

    Group
  • The Ubuntu operating system must disable all wireless network adapters.

    Without protection of communications with wireless peripherals, confidentiality and integrity may be compromised because unprotected communications can be intercepted and either read, altered, or u...
    Rule Medium Severity
  • SRG-OS-000250-GPOS-00093

    Group
  • The Ubuntu operating system SSH server must be configured to use only FIPS-validated key exchange algorithms.

    Without cryptographic integrity protections provided by FIPS-validated cryptographic algorithms, information can be viewed and altered by unauthorized users without detection. The system will atte...
    Rule Medium Severity
  • SRG-OS-000138-GPOS-00069

    Group
  • The Ubuntu operating system must restrict access to the kernel message buffer.

    Restricting access to the kernel message buffer limits access only to root. This prevents attackers from gaining additional system information as a nonprivileged user.
    Rule Low Severity

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules