An XCCDF Profile
Sudo
root
!authenticate
/etc/sudoers
/etc/sudoers.d/
NOPASSWD
rsyslog
$ apt-get install rsyslog
$ sudo systemctl enable rsyslog.service
syslog-ng-core
$ apt-get install syslog-ng-core
syslog-ng
$ sudo systemctl enable syslog-ng.service
$ mount -t xfs | awk '{print $3}'
passwd
shadow
group
gshadow
/etc/group
$ sudo chgrp root /etc/group
/etc/gshadow
$ sudo chgrp shadow /etc/gshadow
/etc/passwd
$ sudo chgrp root /etc/passwd
/etc/shadow
$ sudo chgrp shadow /etc/shadow
$ sudo chown root /etc/group
$ sudo chown root /etc/gshadow
$ sudo chown root /etc/passwd
$ sudo chown root /etc/shadow
$ sudo chmod 0644 /etc/group
$ sudo chmod 0640 /etc/gshadow
$ sudo chmod 0644 /etc/passwd
$ sudo chmod 0640 /etc/shadow
telnet