CyberStrikeus/CyberStrike - Seite 145

cis-ubuntu1204-v110-7-4-2

Create /etc/hosts.allow

Quellsprache: Englisch

cis-ubuntu1204-v110-7-4-3

Verify Permissions on /etc/hosts.allow

Quellsprache: Englisch

cis-ubuntu1204-v110-7-4-4

Create /etc/hosts.deny

Quellsprache: Englisch

cis-ubuntu1204-v110-7-4-5

Verify Permissions on /etc/hosts.deny

Quellsprache: Englisch

cis-ubuntu1204-v110-7-5-1

Disable DCCP

Quellsprache: Englisch

cis-ubuntu1204-v110-7-5-2

Disable SCTP

Quellsprache: Englisch

cis-ubuntu1204-v110-7-5-3

Disable RDS

Quellsprache: Englisch

cis-ubuntu1204-v110-7-5-4

Disable TIPC

Quellsprache: Englisch

cis-ubuntu1204-v110-7-6

Deactivate Wireless Interfaces

Quellsprache: Englisch

cis-ubuntu1204-v110-7-7

Ensure Firewall is active

Quellsprache: Englisch

cis-ubuntu-14-04-lts-1-2-2-ensure-gpg-keys-are-configured

Verify that GPG keys are configured for package manager to ensure package integrity

Quellsprache: Englisch

cis-ubuntu-14-04-lts-1-3-1-ensure-aide-is-installed

Verify that AIDE file integrity checking tool is installed for filesystem monitoring

Quellsprache: Englisch

cis-ubuntu-14-04-lts-1-4-2-ensure-bootloader-password-is-set

Verify that a bootloader password is set to prevent unauthorized boot parameter changes

Quellsprache: Englisch

cis-ubuntu-14-04-lts-1-5-1-ensure-core-dumps-are-restricted

Verify that core dumps are restricted to prevent information disclosure from memory dumps

Quellsprache: Englisch

cis-ubuntu-14-04-lts-1-5-2-ensure-xd-nx-support-is-enabled

Verify that XD/NX (Execute Disable/No Execute) CPU protection is enabled to prevent buffer overflow exploitation

Quellsprache: Englisch

cis-ubuntu-14-04-lts-1-5-4-ensure-prelink-is-disabled

Verify that prelink is disabled to prevent interference with AIDE integrity checking

Quellsprache: Englisch

cis-ubuntu-14-04-lts-1-6-1-3-ensure-selinux-policy-is-configured

Verify that SELinux policy is configured to meet or exceed the default targeted policy

Quellsprache: Englisch

cis-ubuntu-14-04-lts-1-6-1-4-ensure-no-unconfined-daemons-exist

Verify that no daemons are running unconfined outside of SELinux policy restrictions

Quellsprache: Englisch

cis-ubuntu-14-04-lts-1-7-2-ensure-gdm-login-banner-is-configured

Verify that GDM graphical login banner is configured with appropriate warning message

Quellsprache: Englisch

cis-ubuntu-14-04-lts-2-1-10-ensure-xinetd-is-not-enabled

Verify that the xinetd super daemon is disabled when not required

Quellsprache: Englisch

cis-ubuntu-14-04-lts-2-1-4-ensure-echo-services-are-not-enabled

Verify that echo inetd services are disabled to reduce attack surface

Quellsprache: Englisch

cis-ubuntu-14-04-lts-2-1-5-ensure-time-services-are-not-enabled

Verify that time inetd services are disabled to reduce attack surface

Quellsprache: Englisch

cis-ubuntu-14-04-lts-2-1-6-ensure-rsh-server-is-not-enabled

Verify that rsh, rlogin, and rexec inetd services are disabled

Quellsprache: Englisch

cis-ubuntu-14-04-lts-2-1-7-ensure-talk-server-is-not-enabled

Verify that talk inetd services are disabled to reduce attack surface

Quellsprache: Englisch

cis-ubuntu-14-04-lts-2-1-8-ensure-telnet-server-is-not-enabled

Verify that telnet inetd service is disabled to prevent cleartext credential exposure

Quellsprache: Englisch

cis-ubuntu-14-04-lts-2-1-9-ensure-tftp-server-is-not-enabled

Verify that tftp inetd service is disabled to prevent unauthenticated file transfers

Quellsprache: Englisch

cis-ubuntu-14-04-lts-2-2-10-ensure-http-server-is-not-enabled

Verify that Apache HTTP server is disabled when not required

Quellsprache: Englisch

cis-ubuntu-14-04-lts-2-2-12-ensure-samba-is-not-enabled

Verify that Samba SMB file sharing service is disabled when not required

Quellsprache: Englisch

cis-ubuntu-14-04-lts-2-2-14-ensure-snmp-server-is-not-enabled

Verify that SNMP server is disabled when not required

Quellsprache: Englisch

cis-ubuntu-14-04-lts-2-2-17-ensure-nis-server-is-not-enabled

Verify that NIS (ypserv) server is disabled when not required

Quellsprache: Englisch

cis-ubuntu-14-04-lts-2-2-3-ensure-avahi-server-is-not-enabled

Verify that Avahi mDNS/DNS-SD daemon is disabled to reduce attack surface

Quellsprache: Englisch

cis-ubuntu-14-04-lts-2-2-7-ensure-nfs-and-rpc-are-not-enabled

Verify that NFS and RPC services are disabled when not required

Quellsprache: Englisch

cis-ubuntu-14-04-lts-2-2-8-ensure-dns-server-is-not-enabled

Verify that BIND DNS server is disabled when not required

Quellsprache: Englisch

cis-ubuntu-14-04-lts-2-2-9-ensure-ftp-server-is-not-enabled

Verify that vsftpd FTP server is disabled when not required

Quellsprache: Englisch

cis-ubuntu-14-04-lts-2-3-1-ensure-nis-client-is-not-installed

Verify that the NIS client (ypbind) package is not installed

Quellsprache: Englisch

cis-ubuntu-14-04-lts-2-3-2-ensure-rsh-client-is-not-installed

Verify that the rsh client package is not installed

Quellsprache: Englisch

cis-ubuntu-14-04-lts-2-3-3-ensure-talk-client-is-not-installed

Verify that the talk client package is not installed

Quellsprache: Englisch

cis-ubuntu-14-04-lts-2-3-4-ensure-telnet-client-is-not-installed

Verify that the telnet client package is not installed

Quellsprache: Englisch

cis-ubuntu-14-04-lts-2-3-5-ensure-ldap-client-is-not-installed

Verify that the LDAP client (ldap-utils) package is not installed

Quellsprache: Englisch

cis-ubuntu-14-04-lts-3-1-1-ensure-ip-forwarding-is-disabled

Verify that IP forwarding is disabled to prevent the system from acting as a router

Quellsprache: Englisch