CIS CentOS 7 v3.1.1 Server L1

Warning! Audit Deprecated

This audit file has been deprecated and will be removed in a future update.

View Next Version

Audit Details

Name: CIS CentOS 7 v3.1.1 Server L1

Updated: 10/3/2023

Authority: CIS

Plugin: Unix

Revision: 1.6

Estimated Item Count: 326

Audit Changelog


Revision 1.6 Oct 3, 2023 Informational Update 5.5.5 Ensure default user umask is configured - system wide default 5.5.5 Ensure default user umask is configured - system wide umask
Revision 1.5 Jan 10, 2022 Miscellaneous Audit deprecated. Metadata updated. References updated.
Revision 1.4 Jan 7, 2022 Functional Update 3.2.1 Ensure IP forwarding is disabled - ipv6 sysctlc.conf sysctl.d 5.3.16 Ensure SSH Idle Timeout Interval is configured - ClientAliveCountMax 5.3.16 Ensure SSH Idle Timeout Interval is configured - ClientAliveInterval Miscellaneous Metadata updated.
Revision 1.3 Nov 16, 2021 Functional Update 3.2.1 Ensure IP forwarding is disabled - ipv6 sysctl 3.2.1 Ensure IP forwarding is disabled - ipv6 sysctlc.conf sysctl.d 3.5.3.1.3 Ensure firewalld is either not installed or masked with iptables - masked 5.4.2 Ensure lockout for failed password attempts is configured - password-auth 'auth sufficient pam_unix.so' 5.4.2 Ensure lockout for failed password attempts is configured - system-auth 'auth sufficient pam_unix.so' Miscellaneous References updated. Added 3.2.1 Ensure IP forwarding is disabled - ipv4 sysctlc.conf sysctl.d 3.2.1 Ensure IP forwarding is disabled - ipv6 sysctl.conf sysctl.d Removed 3.2.1 Ensure IP forwarding is disabled - ipv6 files 3.2.1 Ensure IP forwarding is disabled - sysctlc.conf sysctl.d
Revision 1.2 Aug 24, 2021 Functional Update 3.5.1.1 Ensure firewalld is installed - firewalld 3.5.1.1 Ensure firewalld is installed - iptables 3.5.1.2 Ensure iptables-services not installed with firewalld 3.5.1.3 Ensure nftables either not installed or masked with firewalld - masked 3.5.1.3 Ensure nftables either not installed or masked with firewalld - stopped 3.5.1.4 Ensure firewalld service enabled and running - enabled 3.5.1.4 Ensure firewalld service enabled and running - running 3.5.1.5 Ensure firewalld default zone is set 3.5.1.6 Ensure network interfaces are assigned to appropriate zone 3.5.1.7 Ensure firewalld drops unnecessary services and ports 3.5.3.2.6 Ensure iptables is enabled and running - running 3.5.3.3.6 Ensure ip6tables is enabled and running 5.5.1.5 Ensure all users last password change date is in the past
Revision 1.1 Jul 20, 2021 Functional Update 5.5.1.1 Ensure password expiration is 365 days or less - users