1. OpenStack Networking - Policy.json - 'get_loadbalancer-agent' | TNS OpenStack Neutron/Networking Security Guide | Unix | ACCESS CONTROL |
1.6.1.3 Ensure SELinux policy is configured | CIS Oracle Linux 6 Server L2 v1.1.0 | Unix | ACCESS CONTROL |
1.6.2.1 Ensure SELinux is not disabled in bootloader configuration - enforcing=0 | CIS Distribution Independent Linux Server L2 v2.0.0 | Unix | ACCESS CONTROL |
1.6.2.1 Ensure SELinux is not disabled in bootloader configuration - selinux=0 | CIS Distribution Independent Linux Workstation L2 v2.0.0 | Unix | ACCESS CONTROL |
1.8.10 Set default umask for users '/etc/csh.login' | CIS HP-UX 11i v1.5 | Unix | ACCESS CONTROL |
1.8.10 Set default umask for users '/etc/d.profile' | CIS HP-UX 11i v1.5 | Unix | ACCESS CONTROL |
2.2.6 Reduce the Sudo Timeout Period | CIS Apple OSX 10.5 Leopard L2 v1.0.0 | Unix | ACCESS CONTROL |
2.13.2 - PCM - enhanced RBAC (AIX 6.1 only) - 'Enhanced RBAC is enabled' | CIS AIX 5.3/6.1 L2 v1.1.0 | Unix | ACCESS CONTROL |
2.13.2 - PCM - enhanced RBAC (AIX 6.1 only) - 'lskst -t dev info' | CIS AIX 5.3/6.1 L2 v1.1.0 | Unix | ACCESS CONTROL |
2.210 - The system must enable SELinux. | Tenable Fedora Linux Best Practices v2.0.0 | Unix | ACCESS CONTROL |
3. OpenStack Networking - Policy.json - 'delete_l3-router' | TNS OpenStack Neutron/Networking Security Guide | Unix | ACCESS CONTROL |
4. OpenStack Networking - Policy.json - 'update_policy_profiles' | TNS OpenStack Neutron/Networking Security Guide | Unix | ACCESS CONTROL |
4.5 Activate AppArmor - GRUB_CMDLINE_LINUX - 0 processes are unconfirmed | CIS Debian Linux 7 L2 v1.0.0 | Unix | ACCESS CONTROL |
4.5 Activate AppArmor - GRUB_CMDLINE_LINUX - 0 profiles are in complain mode | CIS Debian Linux 7 L2 v1.0.0 | Unix | ACCESS CONTROL |
5. OpenStack Networking - Policy.json - 'get_port:binding:vif_details' | TNS OpenStack Neutron/Networking Security Guide | Unix | ACCESS CONTROL |
5.1 Do not disable AppArmor Profile | CIS Docker 1.13.0 v1.0.0 L1 Docker | Unix | ACCESS CONTROL |
5.2 Verify SELinux security options, if applicable | CIS Docker 1.11.0 v1.0.0 L2 Docker | Unix | ACCESS CONTROL |
5.2 Verify SELinux security options, if applicable | CIS Docker 1.13.0 v1.0.0 L2 Docker | Unix | ACCESS CONTROL |
5.3 Reduce the sudo timeout period | CIS Apple OSX 10.9 L1 v1.3.0 | Unix | ACCESS CONTROL |
5.3 Reduce the sudo timeout period | CIS Apple macOS 10.13 L1 v1.1.0 | Unix | ACCESS CONTROL |
5.4 Use a separate timestamp for each user/tty combo | CIS Apple macOS 10.13 L1 v1.0.0 | Unix | ACCESS CONTROL |
5.4.6 Ensure users must provide password for escalation | CIS Amazon Linux 2 STIG v1.0.0 L3 | Unix | ACCESS CONTROL |
5.4.7 Ensure users must re-autenticate for privilege escalation | CIS Amazon Linux 2 STIG v1.0.0 L3 | Unix | ACCESS CONTROL |
12. OpenStack Networking - Policy.json - 'get_loadbalancer-hosting-agent' | TNS OpenStack Neutron/Networking Security Guide | Unix | ACCESS CONTROL |
20.46 Ensure 'Permissions for program file directories must conform to minimum requirements' | CIS Microsoft Windows Server 2016 STIG v2.0.0 STIG MS | Windows | ACCESS CONTROL |
20.46 Ensure 'Permissions for program file directories must conform to minimum requirements' | CIS Microsoft Windows Server 2022 STIG v1.0.0 STIG DC | Windows | ACCESS CONTROL |
20.46 Ensure 'Permissions for program file directories must conform to minimum requirements' | CIS Microsoft Windows Server 2022 STIG v1.0.0 STIG MS | Windows | ACCESS CONTROL |
20.51 Ensure 'Permissions for the Windows installation directory conform to minimum requirements' | CIS Microsoft Windows Server 2016 STIG v2.0.0 STIG DC | Windows | ACCESS CONTROL |
20.51 Ensure 'Permissions for the Windows installation directory conform to minimum requirements' | CIS Microsoft Windows Server 2022 STIG v1.0.0 STIG DC | Windows | ACCESS CONTROL |
23. OpenStack Networking - Policy.json - 'create_port:port_security_enabled' | TNS OpenStack Neutron/Networking Security Guide | Unix | ACCESS CONTROL |
35. OpenStack Networking - Policy.json - 'create_metering_label' | TNS OpenStack Neutron/Networking Security Guide | Unix | ACCESS CONTROL |
47. OpenStack Networking - Policy.json - 'create_router:distributed' | TNS OpenStack Neutron/Networking Security Guide | Unix | ACCESS CONTROL |
50. OpenStack Networking - Policy.json - 'update_network_profile' | TNS OpenStack Neutron/Networking Security Guide | Unix | ACCESS CONTROL |
60. OpenStack Networking - Policy.json - 'update_firewall' | TNS OpenStack Neutron/Networking Security Guide | Unix | ACCESS CONTROL |
62. OpenStack Networking - Policy.json - 'delete_agent' | TNS OpenStack Neutron/Networking Security Guide | Unix | ACCESS CONTROL |
63. OpenStack Networking - Policy.json - 'delete_firewall' | TNS OpenStack Neutron/Networking Security Guide | Unix | ACCESS CONTROL |
65. OpenStack Networking - Policy.json - 'update_network' | TNS OpenStack Neutron/Networking Security Guide | Unix | ACCESS CONTROL |
72. OpenStack Networking - Policy.json - 'create_port:binding:profile' | TNS OpenStack Neutron/Networking Security Guide | Unix | ACCESS CONTROL |
77. OpenStack Networking - Policy.json - 'get_metering_label_rule' | TNS OpenStack Neutron/Networking Security Guide | Unix | ACCESS CONTROL |
81. OpenStack Networking - Policy.json - 'delete_firewall_rule' | TNS OpenStack Neutron/Networking Security Guide | Unix | ACCESS CONTROL |
89. OpenStack Networking - Policy.json - 'delete_metering_label_rule' | TNS OpenStack Neutron/Networking Security Guide | Unix | ACCESS CONTROL |
90. OpenStack Networking - Policy.json - 'create_floatingip' | TNS OpenStack Neutron/Networking Security Guide | Unix | ACCESS CONTROL |
91. OpenStack Networking - Policy.json - 'get_port:binding:profile' | TNS OpenStack Neutron/Networking Security Guide | Unix | ACCESS CONTROL |
98. OpenStack Identity - Policy.json - 'identity:get_policy_for_endpoint' | TNS OpenStack Keystone/Identity Security Guide | Unix | ACCESS CONTROL |
98. OpenStack Networking - Policy.json - 'delete_subnet' | TNS OpenStack Neutron/Networking Security Guide | Unix | ACCESS CONTROL |
110. OpenStack Networking - Policy.json - 'update_router:distributed' | TNS OpenStack Neutron/Networking Security Guide | Unix | ACCESS CONTROL |
115. OpenStack Networking - Policy.json - 'get_network:queue_id' | TNS OpenStack Neutron/Networking Security Guide | Unix | ACCESS CONTROL |
117. OpenStack Networking - Policy.json - 'context_is_advsvc' | TNS OpenStack Neutron/Networking Security Guide | Unix | ACCESS CONTROL |
PCI 7.1.2 - Assignment of privileges is based on job classification and function - 'lskst -t dom info' | PCI DSS 2.0/3.0 - AIX | Unix | ACCESS CONTROL |
Review the list of active Rackspace Role Names (RBAC) | Tenable Best Practices RackSpace v2.0.0 | Rackspace | ACCESS CONTROL |