Skip to content
ATO Pathways
  Log In

III - Administrative Sensitive

Rules and Groups employed by this XCCDF Profile

  • SRG-OS-000480

    <GroupDescription></GroupDescription>
    Group
    Show

  • The FTP daemon must not be installed unless required.

    &lt;VulnDiscussion&gt;FTP is an insecure protocol.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/Fa...
    Rule High Severity
    Show

  • SRG-OS-000480

    <GroupDescription></GroupDescription>
    Group
    Show

  • The TFTP service daemon must not be installed unless required.

    &lt;VulnDiscussion&gt;TFTP is an insecure protocol.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/F...
    Rule High Severity
    Show

  • SRG-OS-000480

    <GroupDescription></GroupDescription>
    Group
    Show

  • The telnet service daemon must not be installed unless required.

    &lt;VulnDiscussion&gt;Telnet is an insecure protocol.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;...
    Rule High Severity
    Show

  • SRG-OS-000480

    <GroupDescription></GroupDescription>
    Group
    Show

  • The UUCP service daemon must not be installed unless required.

    &lt;VulnDiscussion&gt;UUCP is an insecure protocol.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&lt;/F...
    Rule Low Severity
    Show

  • SRG-OS-000480

    <GroupDescription></GroupDescription>
    Group
    Show

  • The rpcbind service must be configured for local only services unless organizationally defined.

    &lt;VulnDiscussion&gt;The portmap and rpcbind services increase the attack surface of the system and should only be used when needed. The portmap o...
    Rule Medium Severity
    Show

  • SRG-OS-000480

    <GroupDescription></GroupDescription>
    Group
    Show

  • The VNC server package must not be installed unless required.

    &lt;VulnDiscussion&gt;The VNC service uses weak authentication capabilities and provides the user complete graphical system access.&lt;/VulnDiscuss...
    Rule Medium Severity
    Show

  • SRG-OS-000095

    <GroupDescription></GroupDescription>
    Group
    Show

  • The operating system must be configured to provide essential capabilities.

    &lt;VulnDiscussion&gt;Operating systems are capable of providing a wide variety of functions and services. Execution must be disabled based on orga...
    Rule Medium Severity
    Show

  • SRG-OS-000480

    <GroupDescription></GroupDescription>
    Group
    Show

  • All run control scripts must have mode 0755 or less permissive.

    &lt;VulnDiscussion&gt;If the startup files are writable by other users, these users could modify the startup files to insert malicious commands int...
    Rule Medium Severity
    Show

  • SRG-OS-000480

    <GroupDescription></GroupDescription>
    Group
    Show

  • All run control scripts must have no extended ACLs.

    &lt;VulnDiscussion&gt;If the startup files are writable by other users, these users could modify the startup files to insert malicious commands int...
    Rule Medium Severity
    Show

  • SRG-OS-000480

    <GroupDescription></GroupDescription>
    Group
    Show

  • Run control scripts executable search paths must contain only authorized paths.

    &lt;VulnDiscussion&gt;The executable search path (typically the PATH environment variable) contains a list of directories for the shell to search t...
    Rule Medium Severity
    Show

Node 2

siemur/test-space

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules