Revision 1.2

Functional Update

• 3.4.2.5 Ensure firewalld drops unnecessary services and ports
• 5.2.3.19 Ensure kernel module loading unloading and modification is collected
• 5.2.4.1 Ensure audit log files are mode 0640 or less permissive
• 5.2.4.2 Ensure only authorized users own audit log files
• 5.2.4.4 Ensure the audit log directory is 0750 or more restrictive