Detections
Analytics

CIS Google Container-Optimized OS L2 Server v1.0.0

Warning! Audit Deprecated

This audit file has been deprecated and will be removed in a future update.

View Next Version

Audit Details

Name: CIS Google Container-Optimized OS L2 Server v1.0.0

Updated: 6/13/2023

Authority: CIS

Plugin: Unix

Revision: 1.10

Estimated Item Count: 94

Audit Changelog

 
Revision 1.10

Jun 13, 2023

Miscellaneous
  • Audit deprecated.
  • Metadata updated.
  • References updated.
Revision 1.9

May 16, 2023

Functional Update
  • 5.3.1.1 Ensure password expiration is 365 days or less - users
  • 5.3.1.4 Ensure inactive password lock is 30 days or less - users
Miscellaneous
  • Variables updated.
Revision 1.8

May 2, 2023

Functional Update
  • 3.3.1.1 Ensure IPv6 default deny firewall policy - Chain FORWARD
  • 3.3.1.1 Ensure IPv6 default deny firewall policy - Chain INPUT
  • 3.3.1.1 Ensure IPv6 default deny firewall policy - Chain OUTPUT
  • 3.3.2.1 Ensure default deny firewall policy - Chain FORWARD
  • 3.3.2.1 Ensure default deny firewall policy - Chain INPUT
  • 3.3.2.1 Ensure default deny firewall policy - Chain OUTPUT
Revision 1.7

Apr 12, 2023

Functional Update
  • 5.3.1.1 Ensure password expiration is 365 days or less - login.defs
  • 5.3.1.2 Ensure minimum days between password changes is 7 or more - login.defs
Miscellaneous
  • Metadata updated.
  • Platform check updated.
  • Variables updated.
Added
  • CIS_Google_Container_Optimized_OS_v1.0.0_L2_Server.audit from CIS Google Container-Optimized OS v1.0.0
Revision 1.6

Mar 20, 2023

Functional Update
  • 5.2.3 Ensure password hashing algorithm is SHA-512
Miscellaneous
  • Metadata updated.
  • Variables updated.
Revision 1.5

Mar 7, 2023

Miscellaneous
  • Metadata updated.
  • References updated.
  • Variables updated.
Revision 1.4

Jan 10, 2023

Functional Update
  • 1.5.1.1 Ensure message of the day is configured properly - platform flags
  • 1.5.1.4 Ensure permissions on /etc/motd are configured
Revision 1.3

Jan 4, 2023

Miscellaneous
  • Metadata updated.
  • Variables updated.
Revision 1.2

Dec 19, 2022

Functional Update
  • 5.3.5 Ensure default user shell timeout is 900 seconds or less - /etc/profile /etc/profile.d
Revision 1.1

Dec 7, 2022

Miscellaneous
  • References updated.