CIS Debian Linux 12 v1.1.0 L2 Server

Audit Details

Name: CIS Debian Linux 12 v1.1.0 L2 Server

Updated: 1/6/2025

Authority: CIS

Plugin: Unix

Revision: 1.1

Estimated Item Count: 63

File Details

Filename: CIS_Debian_Linux_12_v1.1.0_L2_Server.audit

Size: 355 kB

MD5: 355b87a2d6b225cf8a22c631fb356ced
SHA256: 4945d44f5c331b95754b9be957d16eae7fd4818a7e33fa75120aea99e9f7c4b1

Audit Changelog

 
Revision 1.1

Jan 6, 2025

Informational Update
  • 1.1.1.10 Ensure unused filesystems kernel modules are not available
  • 1.1.1.6 Ensure overlayfs kernel module is not available
  • 1.1.1.7 Ensure squashfs kernel module is not available
  • 1.1.1.8 Ensure udf kernel module is not available
  • 3.2.1 Ensure dccp kernel module is not available
  • 3.2.2 Ensure tipc kernel module is not available
  • 3.2.3 Ensure rds kernel module is not available
  • 3.2.4 Ensure sctp kernel module is not available
  • 6.2.3.10 Ensure successful file system mounts are collected
  • 6.2.3.13 Ensure file deletion events by users are collected
  • 6.2.3.15 Ensure successful and unsuccessful attempts to use the chcon command are collected
  • 6.2.3.16 Ensure successful and unsuccessful attempts to use the setfacl command are collected
  • 6.2.3.17 Ensure successful and unsuccessful attempts to use the chacl command are collected
  • 6.2.3.18 Ensure successful and unsuccessful attempts to use the usermod command are collected
  • 6.2.3.19 Ensure kernel module loading unloading and modification is collected
  • 6.2.3.3 Ensure events that modify the sudo log file are collected
  • 6.2.3.6 Ensure use of privileged commands are collected
  • 6.2.3.7 Ensure unsuccessful file access attempts are collected
  • 6.2.3.9 Ensure discretionary access control permission modification events are collected
  • 6.2.4.1 Ensure audit log files mode is configured
  • 6.2.4.2 Ensure audit log files owner is configured
Miscellaneous
  • Metadata updated.