CyberStrikeus/CyberStrike - Page 154

cis-ubuntu2004-v300-5-1-8

Ensure sshd DisableForwarding is enabled

cis-ubuntu2004-v300-5-2-4

Ensure users must provide password for privilege escalation

cis-ubuntu2004-v300-5-2-5

Ensure re-authentication for privilege escalation is not disabled globally

cis-ubuntu2004-v300-5-2-7

Ensure access to the su command is restricted

cis-ubuntu2004-v300-5-4-1-1

Ensure password expiration is configured

cis-ubuntu2004-v300-5-4-1-2

Ensure minimum password days is configured

cis-ubuntu2004-v300-5-4-1-3

Ensure password expiration warning days is configured

cis-ubuntu2004-v300-5-4-1-4

Ensure strong password hashing algorithm is configured

cis-ubuntu2004-v300-5-4-1-5

Ensure inactive password lock is configured

cis-ubuntu2004-v300-5-4-1-6

Ensure all users last password change date is in the past

cis-ubuntu2004-v300-5-4-2-1

Ensure root is the only UID 0 account

cis-ubuntu2004-v300-5-4-2-2

Ensure root is the only GID 0 account

cis-ubuntu2004-v300-5-4-2-3

Ensure group root is the only GID 0 group

cis-ubuntu2004-v300-5-4-2-4

Ensure root account access is controlled

cis-ubuntu2004-v300-5-4-2-5

Ensure root path integrity

cis-ubuntu2004-v300-5-4-2-6

Ensure root user umask is configured

cis-ubuntu2004-v300-5-4-2-7

Ensure system accounts do not have a valid login shell

cis-ubuntu2004-v300-5-4-2-8

Ensure accounts without a valid login shell are locked

cis-ubuntu2004-v300-5-4-3-1

Ensure nologin is not listed in /etc/shells

cis-tomcat10-v110-4-10

Restrict access to Tomcat context.xml

cis-tomcat10-v110-4-11

Restrict access to Tomcat logging.properties

cis-tomcat10-v110-4-12

Restrict access to Tomcat server.xml

cis-tomcat10-v110-4-13

Restrict access to Tomcat tomcat-users.xml

cis-tomcat10-v110-4-14

Restrict access to Tomcat web.xml

cis-tomcat10-v110-4-15

Restrict access to jaspic-providers.xml

cis-tomcat10-v110-4-3

Restrict access to Tomcat configuration directory

cis-tomcat10-v110-4-4

Restrict access to Tomcat logs directory

cis-tomcat10-v110-4-5

Restrict access to Tomcat temp directory

cis-tomcat10-v110-4-6

Restrict access to Tomcat binaries directory

cis-tomcat10-v110-4-7

Restrict access to Tomcat web application directory

cis-tomcat10-v110-4-8

Restrict access to Tomcat catalina.properties

cis-tomcat10-v110-4-9

Restrict access to Tomcat catalina.policy

cis-tomcat10-v110-5-1

Use secure Realms

cis-tomcat10-v110-5-2

Use LockOut Realms

cis-tomcat10-v110-6-1

Setup Client-cert Authentication

cis-tomcat10-v110-6-2

Ensure SSLEnabled is set to True for Sensitive Connectors

cis-tomcat10-v110-6-3

Ensure scheme is set accurately

cis-tomcat10-v110-6-4

Ensure secure is set to true only for SSL-enabled Connectors

cis-tomcat10-v110-6-5

Ensure 'sslProtocol' is Configured Correctly for Secure Connectors

cis-tomcat8-v100-1-2

Disable Unused Connectors