CyberStrikeus/CyberStrike - Page 21

cis-ubuntu2004-v300-6-2-3-5

Ensure rsyslog logging is configured

cis-ubuntu2004-v300-6-2-3-6

Ensure rsyslog is configured to send logs to a remote log host

cis-ubuntu2004-v300-6-2-3-7

Ensure rsyslog is not configured to receive logs from a remote client

cis-ubuntu2004-v300-6-2-3-8

Ensure logrotate is configured

cis-ubuntu2004-v300-6-2-4-1

Ensure access to all logfiles has been configured

cis-ubuntu2004-v300-6-3-1-1

Ensure auditd packages are installed

cis-ubuntu2004-v300-6-3-1-2

Ensure auditd service is enabled and active

cis-ubuntu2004-v300-6-3-1-3

Ensure auditing for processes that start prior to auditd is enabled

cis-ubuntu2004-v300-6-3-1-4

Ensure audit_backlog_limit is configured

cis-ubuntu2004-v300-6-3-2-1

Ensure audit log storage size is configured

cis-ubuntu2004-v300-6-3-2-2

Ensure audit logs are not automatically deleted

cis-ubuntu2004-v300-6-3-2-3

Ensure system is disabled when audit logs are full

cis-ubuntu2004-v300-6-3-2-4

Ensure system warns when audit logs are low on space

cis-ubuntu2004-v300-6-3-3-1

Ensure changes to system administration scope (sudoers) is collected

cis-ubuntu2004-v300-6-3-3-10

Ensure successful file system mounts are collected

cis-ubuntu2004-v300-6-3-3-11

Ensure session initiation information is collected

cis-ubuntu2004-v300-6-3-3-12

Ensure login and logout events are collected

cis-ubuntu2004-v300-6-3-3-13

Ensure file deletion events by users are collected

cis-ubuntu2004-v300-6-3-3-14

Ensure events that modify the system's Mandatory Access Controls are collected

cis-ubuntu2004-v300-6-3-3-15

Ensure successful and unsuccessful attempts to use the chcon command are collected

cis-ubuntu2004-v300-6-3-3-16

Ensure successful and unsuccessful attempts to use the setfacl command are collected

cis-ubuntu2004-v300-6-3-3-2

Ensure actions as another user are always logged

cis-ubuntu2004-v300-6-3-3-3

Ensure events that modify the sudo log file are collected

cis-ubuntu2004-v300-6-3-3-4

Ensure events that modify date and time information are collected

cis-ubuntu2004-v300-6-3-3-5

Ensure events that modify the system's network environment are collected

cis-ubuntu2004-v300-6-3-3-6

Ensure use of privileged commands are collected

cis-ubuntu2004-v300-6-3-3-7

Ensure unsuccessful file access attempts are collected

cis-ubuntu2004-v300-6-3-3-8

Ensure events that modify user/group information are collected

cis-ubuntu2004-v300-6-3-3-9

Ensure discretionary access control permission modification events are collected

cis-ubuntu2004-v300-7-1-1

Ensure access to /etc/passwd is configured

cis-ubuntu2004-v300-7-1-10

Ensure access to /etc/security/opasswd is configured

cis-ubuntu2004-v300-7-1-11

Ensure world writable files and directories are secured

cis-ubuntu2004-v300-7-1-12

Ensure no files or directories without an owner and a group exist

cis-ubuntu2004-v300-7-1-13

Ensure SUID and SGID files are reviewed

cis-ubuntu2004-v300-7-1-2

Ensure access to /etc/passwd- is configured

cis-ubuntu2004-v300-7-1-3

Ensure access to /etc/group is configured

cis-ubuntu2004-v300-7-1-4

Ensure access to /etc/group- is configured

cis-ubuntu2004-v300-7-1-5

Ensure access to /etc/shadow is configured

cis-ubuntu2004-v300-7-1-6

Ensure access to /etc/shadow- is configured

cis-ubuntu2004-v300-7-1-7

Ensure access to /etc/gshadow is configured