Ensure sshd UsePAM is enabled
Skills in this repository
CyberStrikeus/CyberStrike - Page 152
SkillsMP has collected 7,442 skills from CyberStrikeus/CyberStrike. Open a skill to review its source and details.
CyberStrikeus/CyberStrikeShowing 40 of 7,442 collected skills.
Ensure sshd access is configured
Ensure sshd Banner is configured
Ensure sshd Ciphers are configured
Ensure sshd ClientAliveInterval and ClientAliveCountMax are configured
Ensure sshd DisableForwarding is enabled
Ensure sshd GSSAPIAuthentication is disabled
Ensure sshd HostbasedAuthentication is disabled
Ensure sudo is installed
Ensure sudo commands use pty
Ensure sudo log file exists
Ensure users must provide password for privilege escalation
Ensure re-authentication for privilege escalation is not disabled globally
Ensure sudo authentication timeout is configured correctly
Ensure access to the su command is restricted
Ensure password creation requirements are configured
Ensure lockout for failed password attempts is configured
Ensure password reuse is limited
Ensure strong password hashing algorithm is configured
Ensure all current passwords uses the configured hashing algorithm
Ensure minimum days between password changes is configured
Ensure password expiration is 365 days or less
Ensure password expiration warning days is 7 or more
Ensure inactive password lock is 30 days or less
Ensure all users last password change date is in the past
Ensure the number of changed characters in a new password is configured
Ensure password dictionary check is enabled
Ensure system accounts are secured
Ensure default group for the root account is GID 0
Ensure default user umask is 027 or more restrictive
Ensure default user shell timeout is configured
Ensure nologin is not listed in /etc/shells
Ensure maximum number of same consecutive characters in a password is configured
Ensure permissions on /etc/passwd are configured
Ensure world writable files and directories are secured
Ensure no files or directories without an owner and a group exist
Ensure SUID and SGID files are reviewed
Ensure permissions on /etc/shells are configured
Ensure permissions on /etc/passwd- are configured
Ensure permissions on /etc/group are configured