I - Mission Critical Classified
Rules and Groups employed by this XCCDF Profile
-
SRG-OS-000259-GPOS-00100
<GroupDescription></GroupDescription>Group -
The Ubuntu operating system library directories must have mode 0755 or less permissive.
<VulnDiscussion> If the operating system were to allow any user to make changes to software libraries, then those changes might be implemente...Rule Medium Severity -
SRG-OS-000259-GPOS-00100
<GroupDescription></GroupDescription>Group -
The Ubuntu operating system library files must be owned by root.
<VulnDiscussion> If the operating system were to allow any user to make changes to software libraries, then those changes might be implemente...Rule Medium Severity -
SRG-OS-000259-GPOS-00100
<GroupDescription></GroupDescription>Group -
The Ubuntu operating system library directories must be owned by root.
<VulnDiscussion> If the operating system were to allow any user to make changes to software libraries, then those changes might be implemente...Rule Medium Severity -
SRG-OS-000259-GPOS-00100
<GroupDescription></GroupDescription>Group -
The Ubuntu operating system library files must be group-owned by root or a system account.
<VulnDiscussion> If the operating system were to allow any user to make changes to software libraries, then those changes might be implemente...Rule Medium Severity -
SRG-OS-000259-GPOS-00100
<GroupDescription></GroupDescription>Group -
The Ubuntu operating system library directories must be group-owned by root.
<VulnDiscussion> If the operating system were to allow any user to make changes to software libraries, then those changes might be implemente...Rule Medium Severity -
SRG-OS-000269-GPOS-00103
<GroupDescription></GroupDescription>Group -
The Ubuntu operating system must be configured to preserve log records from failure events.
<VulnDiscussion>Failure to a known state can address safety or security in accordance with the mission/business needs of the organization. Fa...Rule Medium Severity -
SRG-OS-000297-GPOS-00115
<GroupDescription></GroupDescription>Group -
The Ubuntu operating system must have an application firewall installed in order to control remote access methods.
<VulnDiscussion>Remote access services, such as those providing remote access to network devices and information systems, which lack automate...Rule Medium Severity -
SRG-OS-000297-GPOS-00115
<GroupDescription></GroupDescription>Group -
The Ubuntu operating system must enable and run the uncomplicated firewall(ufw).
<VulnDiscussion>Remote access services, such as those providing remote access to network devices and information systems, which lack automate...Rule Medium Severity -
SRG-OS-000355-GPOS-00143
<GroupDescription></GroupDescription>Group -
The Ubuntu operating system must, for networked systems, compare internal information system clocks at least every 24 hours with a server which is synchronized to one of the redundant United States Naval Observatory (USNO) time servers, or a time server designated for the appropriate DoD network (NIPRNet/SIPRNet), and/or the Global Positioning System (GPS).
<VulnDiscussion>Inaccurate time stamps make it more difficult to correlate events and can lead to an inaccurate analysis. Determining the cor...Rule Medium Severity -
SRG-OS-000356-GPOS-00144
<GroupDescription></GroupDescription>Group -
The Ubuntu operating system must synchronize internal information system clocks to the authoritative time source when the time difference is greater than one second.
<VulnDiscussion>Inaccurate time stamps make it more difficult to correlate events and can lead to an inaccurate analysis. Determining the cor...Rule Low Severity
Node 2
The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.