CyberStrikeus/CyberStrike - Page 14

cis-ubuntu1804-v220-1-8-2

Ensure GDM login banner is configured

cis-ubuntu1804-v220-1-8-3

Ensure GDM disable-user-list option is enabled

cis-ubuntu1804-v220-1-8-4

Ensure GDM screen locks when the user is idle

cis-ubuntu1804-v220-1-8-5

Ensure GDM screen locks cannot be overridden

cis-ubuntu1804-v220-1-8-6

Ensure GDM automatic mounting of removable media is disabled

cis-ubuntu1804-v220-1-8-7

Ensure GDM disabling automatic mounting of removable media is not overridden

cis-ubuntu1804-v220-1-8-8

Ensure GDM autorun-never is enabled

cis-ubuntu1804-v220-1-8-9

Ensure GDM autorun-never is not overridden

cis-ubuntu1804-v220-2-1-1-1

Ensure a single time synchronization daemon is in use

cis-ubuntu1804-v220-2-1-2-1

Ensure chrony is configured with authorized timeserver

cis-ubuntu1804-v220-2-1-2-2

Ensure chrony is running as user _chrony

cis-ubuntu1804-v220-2-1-2-3

Ensure chrony is enabled and running

cis-ubuntu1804-v220-2-1-3-1

Ensure systemd-timesyncd configured with authorized timeserver

cis-ubuntu1804-v220-2-1-3-2

Ensure systemd-timesyncd is enabled and running

cis-ubuntu1804-v220-2-1-4-1

Ensure ntp access control is configured

cis-ubuntu1804-v220-2-1-4-2

Ensure ntp is configured with authorized timeserver

cis-ubuntu1804-v220-2-1-4-3

Ensure ntp is running as user ntp

cis-ubuntu1804-v220-2-1-4-4

Ensure ntp is enabled and running

cis-ubuntu1804-v220-2-2-13

Ensure SNMP Server is not installed

cis-ubuntu1804-v220-2-2-16

Ensure mail transfer agent is configured for local-only mode

cis-ubuntu1804-v220-5-1-1-1-1

Ensure systemd-journal-remote is installed

cis-ubuntu1804-v220-5-1-1-1-2

Ensure systemd-journal-remote is configured

cis-ubuntu1804-v220-5-1-1-1-3

Ensure systemd-journal-remote is enabled

cis-ubuntu1804-v220-5-1-1-1-4

Ensure journald is not configured to receive logs from a remote client

cis-ubuntu1804-v220-5-1-1-2

Ensure journald service is enabled

cis-ubuntu1804-v220-5-1-1-3

Ensure journald is configured to compress large log files

cis-ubuntu1804-v220-5-1-1-4

Ensure journald is configured to write logfiles to persistent disk

cis-ubuntu1804-v220-5-1-1-5

Ensure journald is not configured to send logs to rsyslog

cis-ubuntu1804-v220-5-1-1-6

Ensure journald log rotation is configured per site policy

cis-ubuntu1804-v220-5-1-1-7

Ensure journald default file permissions configured

cis-ubuntu1804-v220-5-1-2-1

Ensure rsyslog is installed

cis-ubuntu1804-v220-5-1-2-2

Ensure rsyslog service is enabled

cis-ubuntu1804-v220-5-1-2-3

Ensure journald is configured to send logs to rsyslog

cis-ubuntu1804-v220-5-1-2-4

Ensure rsyslog default file permissions are configured

cis-ubuntu1804-v220-5-1-2-5

Ensure logging is configured

cis-ubuntu1804-v220-5-1-2-6

Ensure rsyslog is configured to send logs to a remote log host

cis-ubuntu1804-v220-5-1-2-7

Ensure rsyslog is not configured to receive logs from a remote client

cis-ubuntu1804-v220-5-1-3

Ensure all logfiles have appropriate access configured

cis-ubuntu1804-v220-5-2-1-1

Verify that auditd and audispd-plugins packages are installed

cis-ubuntu1804-v220-5-2-1-2

Verify that the auditd daemon is enabled and running to record system events