CIS CentOS Linux 8 Workstation L1 v1.0.0

Warning! Audit Deprecated

This audit file has been deprecated and will be removed in a future update.

View Next Version

Audit Details

Name: CIS CentOS Linux 8 Workstation L1 v1.0.0

Updated: 1/7/2022

Authority: CIS

Plugin: Unix

Revision: 1.19

Estimated Item Count: 264

Audit Changelog


Revision 1.19 Jan 7, 2022 Miscellaneous Metadata updated. Added 1.8.2 Ensure GDM login banner is configured - banner message enabled 1.8.2 Ensure GDM login banner is configured - banner message text Removed 1.8.2 Ensure GDM login banner is configured - banner message enabled 1.8.2 Ensure GDM login banner is configured - banner message text
Revision 1.18 Nov 17, 2021 Miscellaneous Audit deprecated. Metadata updated. References updated.
Revision 1.17 Aug 2, 2021 Functional Update 6.1.3 Ensure permissions on /etc/shadow are configured 6.1.5 Ensure permissions on /etc/gshadow are configured 6.1.6 Ensure permissions on /etc/passwd- are configured 6.1.7 Ensure permissions on /etc/shadow- are configured 6.1.9 Ensure permissions on /etc/gshadow- are configured
Revision 1.16 Jul 14, 2021 Functional Update 1.1.10 Ensure noexec option set on /var/tmp partition 1.1.14 Ensure nodev option set on /home partition 1.1.15 Ensure nodev option set on /dev/shm partition 1.1.16 Ensure nosuid option set on /dev/shm partition 1.1.17 Ensure noexec option set on /dev/shm partition 1.1.3 Ensure nodev option set on /tmp partition 1.1.4 Ensure nosuid option set on /tmp partition 1.1.5 Ensure noexec option set on /tmp partition 1.1.8 Ensure nodev option set on /var/tmp partition 1.1.9 Ensure nosuid option set on /var/tmp partition Miscellaneous References updated.
Revision 1.15 Jun 17, 2021 Miscellaneous Metadata updated. References updated.
Revision 1.14 Jun 9, 2021 Functional Update 1.4.2 Ensure filesystem integrity is regularly checked 3.4.4.2.1 Ensure IPv6 default deny firewall policy - Chain FORWARD 3.4.4.2.1 Ensure IPv6 default deny firewall policy - Chain INPUT 3.4.4.2.1 Ensure IPv6 default deny firewall policy - Chain OUTPUT 4.2.1.1 Ensure rsyslog is installed 5.5.2 Ensure system accounts are secured - non login 5.7 Ensure access to the su command is restricted - wheel Miscellaneous Metadata updated. References updated. Variables updated.
Revision 1.13 Dec 17, 2020 Functional Update 6.2.20 Ensure all users' home directories exist Miscellaneous References updated.
Revision 1.12 Oct 14, 2020 Functional Update 4.2.3 Ensure permissions on all logfiles are configured
Revision 1.11 Oct 5, 2020 Functional Update 1.4.2 Ensure filesystem integrity is regularly checked 3.4.1.1 Ensure a Firewall package is installed 3.4.4.2.1 Ensure IPv6 default deny firewall policy - Chain FORWARD 3.4.4.2.1 Ensure IPv6 default deny firewall policy - Chain INPUT 3.4.4.2.1 Ensure IPv6 default deny firewall policy - Chain OUTPUT 3.4.4.2.2 Ensure IPv6 loopback traffic is configured - INPUT 3.4.4.2.2 Ensure IPv6 loopback traffic is configured - OUTPUT 3.4.4.2.3 Ensure IPv6 outbound and established connections are configured 3.4.4.2.4 Ensure IPv6 firewall rules exist for all open ports 4.2.1.1 Ensure rsyslog is installed 4.2.1.2 Ensure rsyslog Service is enabled 4.2.1.3 Ensure rsyslog default file permissions configured 4.2.1.4 Ensure logging is configured 4.2.1.5 Ensure rsyslog is configured to send logs to a remote log host 4.2.1.6 Ensure remote rsyslog messages are only accepted on designated log hosts. - InputTCPServerRun 514 4.2.1.6 Ensure remote rsyslog messages are only accepted on designated log hosts. - ModLoad imtcp 5.4.1 Ensure password creation requirements are configured - password complexity Miscellaneous Platform check updated.
Revision 1.10 Sep 29, 2020 Miscellaneous References updated.