CyberStrikeus/CyberStrike - Page 20

cis-ubuntu2004-v300-5-3-2-2

Ensure pam_faillock module is enabled

cis-ubuntu2004-v300-5-3-2-3

Ensure pam_pwquality module is enabled

cis-ubuntu2004-v300-5-3-2-4

Ensure pam_pwhistory module is enabled

cis-ubuntu2004-v300-5-3-3-1-1

Ensure password failed attempts lockout is configured

cis-ubuntu2004-v300-5-3-3-1-2

Ensure password unlock time is configured

cis-ubuntu2004-v300-5-3-3-1-3

Ensure password failed attempts lockout includes root account

cis-ubuntu2004-v300-5-3-3-2-1

Ensure password number of changed characters is configured

cis-ubuntu2004-v300-5-3-3-2-2

Ensure minimum password length is configured

cis-ubuntu2004-v300-5-3-3-2-3

Ensure password complexity is configured

cis-ubuntu2004-v300-5-3-3-2-4

Ensure password same consecutive characters is configured

cis-ubuntu2004-v300-5-3-3-2-5

Ensure password maximum sequential characters is configured

cis-ubuntu2004-v300-5-3-3-2-6

Ensure password dictionary check is enabled

cis-ubuntu2004-v300-5-3-3-2-7

Ensure password quality checking is enforced

cis-ubuntu2004-v300-5-3-3-2-8

Ensure password quality is enforced for the root user

cis-ubuntu2004-v300-5-3-3-3-1

Ensure password history remember is configured

cis-ubuntu2004-v300-5-3-3-3-2

Ensure password history is enforced for the root user

cis-ubuntu2004-v300-5-3-3-3-3

Ensure pam_pwhistory includes use_authtok

cis-ubuntu2004-v300-5-3-3-4-1

Ensure pam_unix does not include nullok

cis-ubuntu2004-v300-5-3-3-4-2

Ensure pam_unix does not include remember

cis-ubuntu2004-v300-5-3-3-4-3

Ensure pam_unix includes a strong password hashing algorithm

cis-ubuntu2004-v300-5-3-3-4-4

Ensure pam_unix includes use_authtok

cis-ubuntu2004-v300-5-4-3-2

Ensure default user shell timeout is configured

cis-ubuntu2004-v300-5-4-3-3

Ensure default user umask is configured

cis-ubuntu2004-v300-6-1-1

Ensure AIDE is installed

cis-ubuntu2004-v300-6-1-2

Ensure filesystem integrity is regularly checked

cis-ubuntu2004-v300-6-1-3

Ensure cryptographic mechanisms are used to protect the integrity of audit tools

cis-ubuntu2004-v300-6-2-1-1

Ensure journald service is enabled and active

cis-ubuntu2004-v300-6-2-1-2

Ensure journald log file access is configured

cis-ubuntu2004-v300-6-2-1-3

Ensure journald log file rotation is configured

cis-ubuntu2004-v300-6-2-2-1-1

Ensure systemd-journal-remote is installed

cis-ubuntu2004-v300-6-2-2-1-2

Ensure systemd-journal-upload authentication is configured

cis-ubuntu2004-v300-6-2-2-1-3

Ensure systemd-journal-upload is enabled and active

cis-ubuntu2004-v300-6-2-2-1-4

Ensure systemd-journal-remote service is not in use

cis-ubuntu2004-v300-6-2-2-2

Ensure journald ForwardToSyslog is disabled

cis-ubuntu2004-v300-6-2-2-3

Ensure journald Compress is configured

cis-ubuntu2004-v300-6-2-2-4

Ensure journald Storage is configured

cis-ubuntu2004-v300-6-2-3-1

Ensure rsyslog service is enabled and active

cis-ubuntu2004-v300-6-2-3-2

Ensure rsyslog is installed

cis-ubuntu2004-v300-6-2-3-3

Ensure journald is configured to send logs to rsyslog

cis-ubuntu2004-v300-6-2-3-4

Ensure rsyslog log file creation mode is configured