Verify that chrony is properly configured with remote time server
Skills in this repository
CyberStrikeus/CyberStrike - Page 9
SkillsMP has collected 7,442 skills from CyberStrikeus/CyberStrike. Open a skill to review its source and details.
CyberStrikeus/CyberStrikeShowing 40 of 7,442 collected skills.
Verify that rsync service is disabled when not required
Verify that CUPS print service is disabled when not required
Verify that DHCP server service is disabled when not required
Verify that slapd LDAP server is disabled when not required
Verify that the DCCP protocol kernel module is disabled to reduce attack surface
Verify that the SCTP protocol kernel module is disabled to reduce attack surface
Verify that the RDS protocol kernel module is disabled to reduce attack surface
Verify that the TIPC protocol kernel module is disabled to reduce attack surface
Verify SSH LogLevel is configured to INFO for adequate logging of login activity
Audit system file permissions using dpkg --verify to detect unauthorized changes
Ensure package manager repositories are configured
Ensure GPG keys are configured
Ensure AIDE is installed
Ensure filesystem integrity is regularly checked
Ensure permissions on bootloader config are not overridden
Ensure bootloader password is set
Ensure permissions on bootloader config are configured
Ensure authentication required for single user mode
Ensure XD/NX support is enabled
Ensure address space layout randomization (ASLR) is enabled
Ensure prelink is disabled
Ensure core dumps are restricted
Ensure AppArmor is installed
Ensure AppArmor is enabled in the bootloader configuration
Ensure all AppArmor Profiles are in enforce or complain mode
Ensure all AppArmor Profiles are enforcing
Ensure message of the day is configured properly
Ensure local login warning banner is configured properly
Ensure remote login warning banner is configured properly
Ensure permissions on /etc/motd are configured
Ensure permissions on /etc/issue are configured
Ensure permissions on /etc/issue.net are configured
Ensure GNOME Display Manager is removed
Ensure GDM login banner is configured
Ensure disable-user-list is enabled
Ensure XDCMP is not enabled
Ensure updates, patches, and additional security software are installed
Ensure time synchronization is in use
Ensure systemd-timesyncd is configured