DISA_STIG_Canonical_Ubuntu_22.04_LTS_v1r1.audit from DISA Canonical Ubuntu 22.04 LTS v1r1 STIG

UBTU-22-211010 - Ubuntu 22.04 LTS must deploy an Endpoint Security Solution.

CAT|II

CCI|CCI-001233

Rule-ID|SV-260468r954041_rule

STIG-ID|UBTU-22-211010

Vuln-ID|V-260468

UBTU-22-211015 - Ubuntu 22.04 LTS must disable the x86 Ctrl-Alt-Delete key sequence.

CAT|I

CCI|CCI-000366

Rule-ID|SV-260469r953220_rule

STIG-ID|UBTU-22-211015

Vuln-ID|V-260469

UBTU-22-212010 - Ubuntu 22.04 LTS, when booted, must require authentication upon booting into single-user and maintenance modes.

CCI|CCI-000213

Rule-ID|SV-260470r953223_rule

STIG-ID|UBTU-22-212010

Vuln-ID|V-260470

UBTU-22-212015 - Ubuntu 22.04 LTS must initiate session audits at system startup.

CCI|CCI-001464

Rule-ID|SV-260471r953226_rule

STIG-ID|UBTU-22-212015

Vuln-ID|V-260471

UBTU-22-213010 - Ubuntu 22.04 LTS must restrict access to the kernel message buffer.

CAT|III

CCI|CCI-001090

Rule-ID|SV-260472r953229_rule

STIG-ID|UBTU-22-213010

Vuln-ID|V-260472

UBTU-22-213015 - Ubuntu 22.04 LTS must disable kernel core dumps so that it can fail to a secure state if system initialization fails, shutdown fails or aborts fail.

CCI|CCI-001190

Rule-ID|SV-260473r953232_rule

STIG-ID|UBTU-22-213015

Vuln-ID|V-260473

UBTU-22-213020 - Ubuntu 22.04 LTS must implement address space layout randomization to protect its memory from unauthorized code execution.

CCI|CCI-002824

Rule-ID|SV-260474r953235_rule

STIG-ID|UBTU-22-213020

Vuln-ID|V-260474

UBTU-22-213025 - Ubuntu 22.04 LTS must implement nonexecutable data to protect its memory from unauthorized code execution.

Rule-ID|SV-260475r953238_rule

STIG-ID|UBTU-22-213025

Vuln-ID|V-260475

UBTU-22-214010 - Ubuntu 22.04 LTS must be configured so that the Advance Package Tool (APT) prevents the installation of patches, service packs, device drivers, or operating system components without verification they have been digitally signed using a certificate that is recognized and approved by the organization.

CCI|CCI-001749

Rule-ID|SV-260476r954022_rule

STIG-ID|UBTU-22-214010

Vuln-ID|V-260476

UBTU-22-214015 - Ubuntu 22.04 LTS must be configured so that the Advance Package Tool (APT) removes all software components after updated versions have been installed.

CCI|CCI-002617

Rule-ID|SV-260477r953244_rule

STIG-ID|UBTU-22-214015

Vuln-ID|V-260477

UBTU-22-215010 - Ubuntu 22.04 LTS must have the "libpam-pwquality" package installed.

Rule-ID|SV-260478r953247_rule

STIG-ID|UBTU-22-215010

Vuln-ID|V-260478

UBTU-22-215015 - Ubuntu 22.04 LTS must have the "chrony" package installed.

Rule-ID|SV-260479r953250_rule

STIG-ID|UBTU-22-215015

Vuln-ID|V-260479

UBTU-22-215020 - Ubuntu 22.04 LTS must not have the "systemd-timesyncd" package installed.

Rule-ID|SV-260480r953253_rule

STIG-ID|UBTU-22-215020

Vuln-ID|V-260480

UBTU-22-215025 - Ubuntu 22.04 LTS must not have the "ntp" package installed.

Rule-ID|SV-260481r953256_rule

STIG-ID|UBTU-22-215025

Vuln-ID|V-260481

UBTU-22-215030 - Ubuntu 22.04 LTS must not have the "rsh-server" package installed.

CCI|CCI-000381

Rule-ID|SV-260482r953259_rule

STIG-ID|UBTU-22-215030

Vuln-ID|V-260482

UBTU-22-215035 - Ubuntu 22.04 LTS must not have the "telnet" package installed.

CCI|CCI-000197

Rule-ID|SV-260483r953262_rule

STIG-ID|UBTU-22-215035

Vuln-ID|V-260483

UBTU-22-231010 - Ubuntu 22.04 LTS must implement cryptographic mechanisms to prevent unauthorized disclosure and modification of all information that requires protection at rest.

CCI|CCI-001199

CCI|CCI-002475

CCI|CCI-002476

Rule-ID|SV-260484r953265_rule

STIG-ID|UBTU-22-231010

Vuln-ID|V-260484

UBTU-22-232010 - Ubuntu 22.04 LTS must have directories that contain system commands set to a mode of "755" or less permissive.

CCI|CCI-001495

Rule-ID|SV-260485r953268_rule

STIG-ID|UBTU-22-232010

Vuln-ID|V-260485

UBTU-22-232015 - Ubuntu 22.04 LTS must have system commands set to a mode of "755" or less permissive.

CCI|CCI-001499

Rule-ID|SV-260486r953271_rule

STIG-ID|UBTU-22-232015

Vuln-ID|V-260486

UBTU-22-232020 - Ubuntu 22.04 LTS library files must have mode "755" or less permissive.

Rule-ID|SV-260487r953274_rule

STIG-ID|UBTU-22-232020

Vuln-ID|V-260487

UBTU-22-232025 - Ubuntu 22.04 LTS must configure the "/var/log" directory to have mode "755" or less permissive.

CCI|CCI-001314

Rule-ID|SV-260488r953277_rule

STIG-ID|UBTU-22-232025

Vuln-ID|V-260488

UBTU-22-232026 - Ubuntu 22.04 LTS must generate error messages that provide information necessary for corrective actions without revealing information that could be exploited by adversaries.

CCI|CCI-001312

Rule-ID|SV-260489r953280_rule

STIG-ID|UBTU-22-232026

Vuln-ID|V-260489

UBTU-22-232027 - Ubuntu 22.04 LTS must generate system journal entries without revealing information that could be exploited by adversaries.

Rule-ID|SV-260490r953283_rule

STIG-ID|UBTU-22-232027

Vuln-ID|V-260490

UBTU-22-232030 - Ubuntu 22.04 LTS must configure "/var/log/syslog" file with mode "640" or less permissive.

Rule-ID|SV-260491r953286_rule

STIG-ID|UBTU-22-232030

Vuln-ID|V-260491

UBTU-22-232035 - Ubuntu 22.04 LTS must configure audit tools with a mode of "755" or less permissive.

CCI|CCI-001493

CCI|CCI-001494

Rule-ID|SV-260492r953289_rule

STIG-ID|UBTU-22-232035

Vuln-ID|V-260492

UBTU-22-232040 - Ubuntu 22.04 LTS must have directories that contain system commands owned by "root".

Rule-ID|SV-260493r953292_rule

STIG-ID|UBTU-22-232040

Vuln-ID|V-260493

UBTU-22-232045 - Ubuntu 22.04 LTS must have directories that contain system commands group-owned by "root".

Rule-ID|SV-260494r953295_rule

STIG-ID|UBTU-22-232045

Vuln-ID|V-260494

UBTU-22-232050 - Ubuntu 22.04 LTS must have system commands owned by "root" or a system account.

Rule-ID|SV-260495r953298_rule

STIG-ID|UBTU-22-232050

Vuln-ID|V-260495

UBTU-22-232055 - Ubuntu 22.04 LTS must have system commands group-owned by "root" or a system account.

Rule-ID|SV-260496r953301_rule

STIG-ID|UBTU-22-232055

Vuln-ID|V-260496

UBTU-22-232060 - Ubuntu 22.04 LTS library directories must be owned by "root".

Rule-ID|SV-260497r953304_rule

STIG-ID|UBTU-22-232060

Vuln-ID|V-260497

UBTU-22-232065 - Ubuntu 22.04 LTS library directories must be group-owned by "root".

Rule-ID|SV-260498r953307_rule

STIG-ID|UBTU-22-232065

Vuln-ID|V-260498

UBTU-22-232070 - Ubuntu 22.04 LTS library files must be owned by "root".

Rule-ID|SV-260499r953310_rule

STIG-ID|UBTU-22-232070

Vuln-ID|V-260499

UBTU-22-232075 - Ubuntu 22.04 LTS library files must be group-owned by "root".

Rule-ID|SV-260500r953313_rule

STIG-ID|UBTU-22-232075

Vuln-ID|V-260500

UBTU-22-232080 - Ubuntu 22.04 LTS must configure the directories used by the system journal to be owned by "root".

Rule-ID|SV-260501r953316_rule

STIG-ID|UBTU-22-232080

Vuln-ID|V-260501

UBTU-22-232085 - Ubuntu 22.04 LTS must configure the directories used by the system journal to be group-owned by "systemd-journal".

Rule-ID|SV-260502r953319_rule

STIG-ID|UBTU-22-232085

Vuln-ID|V-260502

UBTU-22-232090 - Ubuntu 22.04 LTS must configure the files used by the system journal to be owned by "root".

Rule-ID|SV-260503r953322_rule

STIG-ID|UBTU-22-232090

Vuln-ID|V-260503

UBTU-22-232095 - Ubuntu 22.04 LTS must configure the files used by the system journal to be group-owned by "systemd-journal".

Rule-ID|SV-260504r953325_rule

STIG-ID|UBTU-22-232095

Vuln-ID|V-260504

UBTU-22-232100 - Ubuntu 22.04 LTS must be configured so that the "journalctl" command is owned by "root".

Rule-ID|SV-260505r953328_rule

STIG-ID|UBTU-22-232100

Vuln-ID|V-260505

UBTU-22-232105 - Ubuntu 22.04 LTS must be configured so that the "journalctl" command is group-owned by "root".

Rule-ID|SV-260506r953331_rule

STIG-ID|UBTU-22-232105

Vuln-ID|V-260506

UBTU-22-232110 - Ubuntu 22.04 LTS must configure audit tools to be owned by "root".

Rule-ID|SV-260507r953334_rule

STIG-ID|UBTU-22-232110

Vuln-ID|V-260507

UBTU-22-232120 - Ubuntu 22.04 LTS must configure the "/var/log" directory to be owned by "root".

Rule-ID|SV-260508r953337_rule

STIG-ID|UBTU-22-232120

Vuln-ID|V-260508

UBTU-22-232125 - Ubuntu 22.04 LTS must configure the "/var/log" directory to be group-owned by "syslog".

Rule-ID|SV-260509r953340_rule

STIG-ID|UBTU-22-232125

Vuln-ID|V-260509

UBTU-22-232130 - Ubuntu 22.04 LTS must configure "/var/log/syslog" file to be owned by "syslog".

Rule-ID|SV-260510r953343_rule

STIG-ID|UBTU-22-232130

Vuln-ID|V-260510

UBTU-22-232135 - Ubuntu 22.04 LTS must configure the "/var/log/syslog" file to be group-owned by "adm".

Rule-ID|SV-260511r953346_rule

STIG-ID|UBTU-22-232135

Vuln-ID|V-260511

UBTU-22-232140 - Ubuntu 22.04 LTS must be configured so that the "journalctl" command is not accessible by unauthorized users.

Detections

Analytics

DISA STIG Canonical Ubuntu 22.04 LTS v1r1

Warning! Audit Deprecated

Audit Details

Audit Changelog

Revision 1.1

Miscellaneous