Item Search

NameAudit NamePluginCategory
1.4.6 Ensure version 7.2 or newer booted with UEFI have a unique name for the grub superusers account - UEFI must have a unique name for the grub superusers account when booting into single-user mode and maintenance.CIS Red Hat Enterprise Linux 7 STIG v2.0.0 STIGUnix

ACCESS CONTROL

CNTR-K8-000270 - The Kubernetes API Server must enable Node,RBAC as the authorization mode.DISA STIG Kubernetes v1r10Unix
CNTR-K8-000270 - The Kubernetes API Server must enable Node,RBAC as the authorization mode.DISA STIG Kubernetes v1r5Unix
CNTR-K8-000320 - The Kubernetes API server must have the insecure port flag disabled.DISA STIG Kubernetes v1r8Unix
CNTR-K8-000330 - The Kubernetes Kubelet must have the read-only port flag disabled.DISA STIG Kubernetes v1r2Unix
CNTR-K8-000330 - The Kubernetes Kubelet must have the read-only port flag disabled.DISA STIG Kubernetes v1r5Unix
CNTR-K8-000340 - The Kubernetes API server must have the insecure bind address not set.DISA STIG Kubernetes v1r2Unix
CNTR-K8-000340 - The Kubernetes API server must have the insecure bind address not set.DISA STIG Kubernetes v1r5Unix
CNTR-K8-000350 - The Kubernetes API server must have the secure port set.DISA STIG Kubernetes v1r2Unix
CNTR-K8-000350 - The Kubernetes API server must have the secure port set.DISA STIG Kubernetes v1r4Unix
CNTR-K8-000360 - The Kubernetes API server must have anonymous authentication disabled.DISA STIG Kubernetes v1r5Unix
CNTR-K8-000360 - The Kubernetes API server must have anonymous authentication disabled.DISA STIG Kubernetes v1r8Unix
CNTR-K8-000370 - The Kubernetes Kubelet must have anonymous authentication disabled.DISA STIG Kubernetes v1r4Unix
CNTR-K8-000370 - The Kubernetes Kubelet must have anonymous authentication disabled.DISA STIG Kubernetes v1r6Unix
CNTR-K8-000370 - The Kubernetes Kubelet must have anonymous authentication disabled.DISA STIG Kubernetes v1r8Unix
CNTR-K8-000380 - The Kubernetes kubelet must enable explicit authorization.DISA STIG Kubernetes v1r6Unix
CNTR-K8-000410 - Kubernetes Worker Nodes must not have the sshd service enabled.DISA STIG Kubernetes v1r4Unix
CNTR-K8-000430 - Kubernetes Kubectl cp command must give expected access and results.DISA STIG Kubernetes v1r8Unix
CNTR-K8-000440 - The Kubernetes kubelet static PodPath must not enable static pods.DISA STIG Kubernetes v1r2Unix
CNTR-K8-000440 - The Kubernetes kubelet static PodPath must not enable static pods.DISA STIG Kubernetes v1r4Unix
CNTR-K8-000440 - The Kubernetes kubelet static PodPath must not enable static pods.DISA STIG Kubernetes v1r6Unix
CNTR-K8-000450 - Kubernetes DynamicAuditing must not be enabled - kubeletDISA STIG Kubernetes v1r10Unix
CNTR-K8-000450 - Kubernetes DynamicAuditing must not be enabled - kubeletDISA STIG Kubernetes v1r8Unix
CNTR-K8-000450 - Kubernetes DynamicAuditing must not be enabled - manifestDISA STIG Kubernetes v1r8Unix
CNTR-K8-000460 - Kubernetes DynamicKubeletConfig must not be enabled - kubeletDISA STIG Kubernetes v1r8Unix
CNTR-K8-000460 - Kubernetes DynamicKubeletConfig must not be enabled - manifestDISA STIG Kubernetes v1r2Unix
CNTR-K8-000460 - Kubernetes DynamicKubeletConfig must not be enabled - manifestDISA STIG Kubernetes v1r8Unix
CNTR-K8-000470 - The Kubernetes API server must have Alpha APIs disabled.DISA STIG Kubernetes v1r6Unix
DB2X-00-000400 - DB2 must enforce approved authorizations for logical access to information and system resources in accordance with applicable access control policies - AUTHIDDISA STIG IBM DB2 v10.5 LUW v1r4 DatabaseIBM_DB2DB
DB2X-00-000400 - DB2 must enforce approved authorizations for logical access to information and system resources in accordance with applicable access control policies - ROLENAMEDISA STIG IBM DB2 v10.5 LUW v1r4 DatabaseIBM_DB2DB
DTAM144 - McAfee VirusScan Access Protection: Common Standard Protection must be set to prevent termination of McAfee processes.DISA McAfee VirusScan 8.8 Managed Client STIG v5r20Windows
DTAM144 - McAfee VirusScan Access Protection: Common Standard Protection must be set to prevent termination of McAfee processes.DISA McAfee VirusScan 8.8 Managed Client STIG v5r21Windows
GEN008620 - System BIOS or system controllers supporting password protection must have admin accounts/passwords configured, and no others.DISA STIG AIX 6.1 v1r13Unix
JUEX-NM-000060 - The Juniper EX switch must be configured to assign appropriate user roles or access levels to authenticated users.DISA Juniper EX Series Network Device Management v1r4Juniper
OL07-00-010483 - Oracle Linux operating systems version 7.2 or newer booted with a BIOS must have a unique name for the grub superusers account when booting into single-user and maintenance modes.DISA Oracle Linux 7 STIG v2r11Unix
OL07-00-010483 - Oracle Linux operating systems version 7.2 or newer booted with a BIOS must have a unique name for the grub superusers account when booting into single-user and maintenance modes.DISA Oracle Linux 7 STIG v2r4Unix
OL07-00-010492 - Oracle Linux operating systems version 7.2 or newer booted with United Extensible Firmware Interface (UEFI) must have a unique name for the grub superusers account when booting into single-user mode and maintenance.DISA Oracle Linux 7 STIG v2r5Unix
OL07-00-010492 - Oracle Linux operating systems version 7.2 or newer booted with United Extensible Firmware Interface (UEFI) must have a unique name for the grub superusers account when booting into single-user mode and maintenance.DISA Oracle Linux 7 STIG v2r9Unix
OL08-00-010140 - OL 8 operating systems booted with United Extensible Firmware Interface (UEFI) must require authentication upon booting into single-user mode and maintenance - UEFI must require authentication upon booting into single-user mode and maintenanceDISA Oracle Linux 8 STIG v1r6Unix
OL08-00-010141 - OL 8 operating systems booted with United Extensible Firmware Interface (UEFI) must have a unique name for the grub superusers account when booting into single-user mode and maintenance - UEFI must require a unique superusers name upon booting into single-user mode and maintenance.DISA Oracle Linux 8 STIG v1r7Unix
OL08-00-010149 - OL 8 operating systems booted with a BIOS must have a unique name for the grub superusers account when booting into single-user and maintenance modes.DISA Oracle Linux 8 STIG v1r8Unix
OL08-00-010150 - OL 8 operating systems booted with a BIOS must require authentication upon booting into single-user and maintenance modes.DISA Oracle Linux 8 STIG v1r9Unix
RHEL-07-010492 - Red Hat Enterprise Linux operating systems version 7.2 or newer booted with United Extensible Firmware Interface (UEFI) must have a unique name for the grub superusers account when booting into single-user mode and maintenance.DISA Red Hat Enterprise Linux 7 STIG v3r8Unix
RHEL-08-010140 - RHEL 8 operating systems booted with United Extensible Firmware Interface (UEFI) implemented must require authentication upon booting into single-user mode and maintenance. - passwordDISA Red Hat Enterprise Linux 8 STIG v1r1Unix
RHEL-08-010140 - RHEL 8 operating systems booted with United Extensible Firmware Interface (UEFI) must require authentication upon booting into single-user mode and maintenance - UEFI must require authentication upon booting into single-user mode and maintenanceDISA Red Hat Enterprise Linux 8 STIG v1r5Unix
RHEL-08-010140 - RHEL 8 operating systems booted with United Extensible Firmware Interface (UEFI) must require authentication upon booting into single-user mode and maintenance.DISA Red Hat Enterprise Linux 8 STIG v1r11Unix
RHEL-08-010149 - RHEL 8 operating systems booted with a BIOS must require a unique superusers name upon booting into single-user and maintenance modes.DISA Red Hat Enterprise Linux 8 STIG v1r13Unix
RHEL-08-010150 - RHEL 8 operating systems booted with a BIOS must require authentication upon booting into single-user and maintenance modes. - passwordDISA Red Hat Enterprise Linux 8 STIG v1r1Unix
RHEL-08-010151 - RHEL 8 operating systems must require authentication upon booting into rescue mode.DISA Red Hat Enterprise Linux 8 STIG v1r13Unix
RHEL-08-010152 - RHEL 8 operating systems must require authentication upon booting into emergency mode.DISA Red Hat Enterprise Linux 8 STIG v1r13Unix