Menu
Por padrão, está selecionado o prompt que primeiro revisa a origem. Você pode mudar para um comando direto ou baixar uma cópia local.
Leia o SKILL.md e os arquivos complementares exibidos pelo SkillsMP antes de decidir se vai instalar.
Instalar com Codex ou Claude Copie este prompt, cole no Codex, Claude ou outro assistente e deixe que ele revise a página da skill e instale para você.
Um comando direto ignora o prompt de revisão. Verifique a origem antes de executá-lo.
npx skills add https://github.com/CyberStrikeus/CyberStrike --skill cis-ubuntu1804-v220-1-1-3-1O comando permanece em uma só linha. Role horizontalmente para revisá-lo antes de copiar.
Prefere uma cópia local? Baixe os arquivos disponíveis atualmente no SkillsMP.
macOS post-exploitation for credential harvesting, DTrace monitoring, TCC bypass, and stealth operations via native tools
Windows userland post-exploitation for credential harvesting, monitoring, AMSI/ETW bypass, and stealth operations
Kubernetes post-exploitation for container escape, secret extraction, RBAC abuse, and cluster persistence
Baseado na classificação ocupacional SOC
Exibindo SKILL.md
| name | cis-ubuntu1804-v220-1-1-3-1 |
| description | Ensure separate partition exists for /var |
| category | cis-storage |
| version | 2.2.0 |
| author | cyberstrike-official |
| tags | ["cis","ubuntu","linux","ubuntu-18.04","partition","var","mount"] |
| cis_id | 1.1.3.1 |
| cis_benchmark | CIS Ubuntu Linux 18.04 LTS Benchmark v2.2.0 |
| tech_stack | ["ubuntu","linux"] |
| cwe_ids | [] |
| chains_with | [] |
| prerequisites | [] |
| severity_boost | {} |
Level 2 - Server / Level 2 - Workstation, Assessment: Automated
The /var directory is used by daemons and other system services to temporarily store dynamic data. Some directories created by these processes may be world-writable.
The reasoning for mounting /var on a separate partition is to provide protection in case of a software or configuration error that causes excessive disk consumption in /var. Since /var contains the bulk of dynamic system data such as logs, mail spools, and package manager cache, isolating it prevents a runaway process from filling the root filesystem.
Resizing filesystems is a common activity in cloud-hosted servers. Separate filesystem partitions may prevent tying the overall disk management to one large volume. It may be necessary to use Logical Volume Management (LVM) or similar tools to create a flexible partitioning scheme for /var.
Run the following command and verify the output shows that /var is mounted:
# findmnt -kn /var
/var /dev/sda2 ext4 rw,relatime,seclabel
For specific configuration requirements of the /var mount for your environment, modify /etc/fstab:
# Configure /etc/fstab as appropriate:
# Example:
# <device> /var <fstype> defaults,rw,nosuid,nodev,relatime 0 0
Creating a new partition is a destructive operation that typically requires a reinstallation or use of LVM.
By default /var is not a separate partition.
v8 - 3.3 Configure Data Access Control Lists (IG 1, IG 2, IG 3) v7 - 14.6 Protect Information through Access Control Lists (IG 1, IG 2, IG 3)
MITRE ATT&CK Mappings: T1499, T1499.001 (TA0006) - M1022