CyberStrikeus/CyberStrike - Page 18

cis-ubuntu2004-v300-2-3-3-3

Ensure chrony is enabled and running

cis-ubuntu2004-v300-2-4-1-1

Ensure cron daemon is enabled and active

cis-ubuntu2004-v300-2-4-1-2

Ensure access to /etc/crontab is configured

cis-ubuntu2004-v300-2-4-1-3

Ensure access to /etc/cron.hourly is configured

cis-ubuntu2004-v300-2-4-1-4

Ensure access to /etc/cron.daily is configured

cis-ubuntu2004-v300-2-4-1-5

Ensure access to /etc/cron.weekly is configured

cis-ubuntu2004-v300-2-4-1-6

Ensure access to /etc/cron.monthly is configured

cis-ubuntu2004-v300-2-4-1-7

Ensure access to /etc/cron.yearly is configured

cis-ubuntu2004-v300-2-4-1-8

Ensure access to /etc/cron.d is configured

cis-ubuntu2004-v300-2-4-1-9

Ensure access to crontab is configured

cis-ubuntu2004-v300-2-4-2-1

Ensure access to at is configured

cis-ubuntu2004-v300-3-1-1

Ensure IPv6 status is identified

cis-ubuntu2004-v300-3-1-2

Ensure wireless interfaces are not available

cis-ubuntu2004-v300-3-1-3

Ensure bluetooth services are not in use

cis-ubuntu2004-v300-3-2-1

Ensure dccp kernel module is not available

cis-ubuntu2004-v300-3-2-2

Ensure tipc kernel module is not available

cis-ubuntu2004-v300-3-2-3

Ensure rds kernel module is not available

cis-ubuntu2004-v300-3-2-4

Ensure sctp kernel module is not available

cis-ubuntu2004-v300-3-3-1

Ensure ip forwarding is disabled

cis-ubuntu2004-v300-3-3-10

Ensure tcp syn cookies is enabled

cis-ubuntu2004-v300-3-3-11

Ensure ipv6 router advertisements are not accepted

cis-ubuntu2004-v300-3-3-2

Ensure packet redirect sending is disabled

cis-ubuntu2004-v300-3-3-3

Ensure bogus icmp responses are ignored

cis-ubuntu2004-v300-3-3-4

Ensure broadcast icmp requests are ignored

cis-ubuntu2004-v300-3-3-5

Ensure icmp redirects are not accepted

cis-ubuntu2004-v300-3-3-6

Ensure secure icmp redirects are not accepted

cis-ubuntu2004-v300-3-3-7

Ensure reverse path filtering is enabled

cis-ubuntu2004-v300-3-3-8

Ensure source routed packets are not accepted

cis-ubuntu2004-v300-3-3-9

Ensure suspicious packets are logged

cis-ubuntu2004-v300-4-1-1

Ensure a single firewall configuration utility is in use

cis-ubuntu2004-v300-4-2-1

Ensure ufw is installed

cis-ubuntu2004-v300-4-2-2

Ensure nftables is not in use with ufw

cis-ubuntu2004-v300-4-2-3

Ensure iptables-persistent is not installed with ufw

cis-ubuntu2004-v300-4-2-4

Ensure ufw service is enabled

cis-ubuntu2004-v300-4-2-5

Ensure ufw loopback traffic is configured

cis-ubuntu2004-v300-4-2-6

Ensure ufw outbound connections are configured

cis-ubuntu2004-v300-4-2-7

Ensure ufw firewall rules exist for all open ports

cis-ubuntu2004-v300-4-2-8

Ensure ufw default deny firewall policy

cis-ubuntu2004-v300-4-3-1

Ensure nftables is installed

cis-ubuntu2004-v300-4-3-10

Ensure nftables rules are permanent