Item Search

NameAudit NamePluginCategory
ALMA-09-026200 - AlmaLinux OS 9 must prevent files with the setuid and setgid bit set from being executed on the /boot/efi directory.DISA CloudLinux AlmaLinux OS 9 STIG v1r1Unix

CONFIGURATION MANAGEMENT

ALMA-09-026420 - AlmaLinux OS 9 must prevent files with the setuid and setgid bit set from being executed on the /boot directory.DISA CloudLinux AlmaLinux OS 9 STIG v1r1Unix

CONFIGURATION MANAGEMENT

ALMA-09-026530 - AlmaLinux OS 9 must mount /dev/shm with the nodev option.DISA CloudLinux AlmaLinux OS 9 STIG v1r1Unix

CONFIGURATION MANAGEMENT

ALMA-09-026750 - AlmaLinux OS 9 must mount /dev/shm with the nosuid option.DISA CloudLinux AlmaLinux OS 9 STIG v1r1Unix

CONFIGURATION MANAGEMENT

ALMA-09-027080 - AlmaLinux OS 9 must mount /tmp with the nosuid option.DISA CloudLinux AlmaLinux OS 9 STIG v1r1Unix

CONFIGURATION MANAGEMENT

ALMA-09-027630 - AlmaLinux OS 9 must mount /var/log with the noexec option.DISA CloudLinux AlmaLinux OS 9 STIG v1r1Unix

CONFIGURATION MANAGEMENT

ALMA-09-028070 - AlmaLinux OS 9 must mount /var/tmp with the noexec option.DISA CloudLinux AlmaLinux OS 9 STIG v1r1Unix

CONFIGURATION MANAGEMENT

ALMA-09-028180 - AlmaLinux OS 9 must mount /var/tmp with the nosuid option.DISA CloudLinux AlmaLinux OS 9 STIG v1r1Unix

CONFIGURATION MANAGEMENT

GOOG-12-006600 - Google Android 12 must be configured to enforce an application installation policy by specifying an application allowlist that restricts applications by the following characteristics: [selection: list of digital signatures, cryptographic hash values, names, application version].MobileIron - DISA Google Android 12 COBO v1r2MDM

CONFIGURATION MANAGEMENT

GOOG-13-706600 - Google Android 13 must be configured to enforce an application installation policy by specifying an application allowlist that restricts applications by the following characteristics: [selection: list of digital signatures, cryptographic hash values, names, application version].AirWatch - DISA Google Android 13 BYOD v1r2MDM

CONFIGURATION MANAGEMENT

GOOG-14-006600 - Google Android 14 must be configured to enforce an application installation policy by specifying an application allowlist that restricts applications by the following characteristics: [selection: list of digital signatures, cryptographic hash values, names, application version].AirWatch - DISA Google Android 14 COBO v2r1MDM

CONFIGURATION MANAGEMENT

MSFT-11-001000 - Microsoft Android 11 must be configured to enforce an application installation policy by specifying an application allow list that restricts applications by the following characteristics: [selection: list of digital signatures, cryptographic hash values, names, application version].AirWatch - DISA Microsoft Android 11 COPE v1r2MDM

CONFIGURATION MANAGEMENT

MSFT-11-001000 - Microsoft Android 11 must be configured to enforce an application installation policy by specifying an application allow list that restricts applications by the following characteristics: [selection: list of digital signatures, cryptographic hash values, names, application version].AirWatch - DISA Microsoft Android 11 COBO v1r2MDM

CONFIGURATION MANAGEMENT

MSFT-11-001000 - Microsoft Android 11 must be configured to enforce an application installation policy by specifying an application allow list that restricts applications by the following characteristics: [selection: list of digital signatures, cryptographic hash values, names, application version].MobileIron - DISA Microsoft Android 11 COBO v1r2MDM

CONFIGURATION MANAGEMENT

OL08-00-040122 - OL 8 must mount '/dev/shm' with the 'noexec' option.DISA Oracle Linux 8 STIG v2r2Unix

CONFIGURATION MANAGEMENT

OL08-00-040126 - OL 8 must mount '/var/log' with the 'nodev' option.DISA Oracle Linux 8 STIG v2r2Unix

CONFIGURATION MANAGEMENT

OL08-00-040129 - OL 8 must mount '/var/log/audit' with the 'nodev' option.DISA Oracle Linux 8 STIG v2r2Unix

CONFIGURATION MANAGEMENT

OL08-00-040131 - OL 8 must mount '/var/log/audit' with the 'noexec' option.DISA Oracle Linux 8 STIG v2r2Unix

CONFIGURATION MANAGEMENT

OL08-00-040134 - OL 8 must mount '/var/tmp' with the 'noexec' option.DISA Oracle Linux 8 STIG v2r2Unix

CONFIGURATION MANAGEMENT

RHEL-08-040122 - RHEL 8 must mount /dev/shm with the noexec option.DISA Red Hat Enterprise Linux 8 STIG v2r1Unix

CONFIGURATION MANAGEMENT

RHEL-08-040123 - RHEL 8 must mount /tmp with the nodev option.DISA Red Hat Enterprise Linux 8 STIG v2r1Unix

CONFIGURATION MANAGEMENT

RHEL-08-040126 - RHEL 8 must mount /var/log with the nodev option.DISA Red Hat Enterprise Linux 8 STIG v2r1Unix

CONFIGURATION MANAGEMENT

RHEL-08-040127 - RHEL 8 must mount /var/log with the nosuid option.DISA Red Hat Enterprise Linux 8 STIG v2r1Unix

CONFIGURATION MANAGEMENT

RHEL-08-040129 - RHEL 8 must mount /var/log/audit with the nodev option.DISA Red Hat Enterprise Linux 8 STIG v2r1Unix

CONFIGURATION MANAGEMENT

RHEL-08-040130 - RHEL 8 must mount /var/log/audit with the nosuid option.DISA Red Hat Enterprise Linux 8 STIG v2r1Unix

CONFIGURATION MANAGEMENT

RHEL-08-040131 - RHEL 8 must mount /var/log/audit with the noexec option.DISA Red Hat Enterprise Linux 8 STIG v2r1Unix

CONFIGURATION MANAGEMENT

RHEL-08-040132 - RHEL 8 must mount /var/tmp with the nodev option.DISA Red Hat Enterprise Linux 8 STIG v2r1Unix

CONFIGURATION MANAGEMENT

RHEL-08-040134 - RHEL 8 must mount /var/tmp with the noexec option.DISA Red Hat Enterprise Linux 8 STIG v2r1Unix

CONFIGURATION MANAGEMENT

RHEL-08-040136 - The RHEL 8 fapolicy module must be enabled.DISA Red Hat Enterprise Linux 8 STIG v2r1Unix

CONFIGURATION MANAGEMENT

RHEL-08-040137 - The RHEL 8 fapolicy module must be configured to employ a deny-all, permit-by-exception policy to allow the execution of authorized software programs.DISA Red Hat Enterprise Linux 8 STIG v2r1Unix

CONFIGURATION MANAGEMENT

RHEL-09-231045 - RHEL 9 must prevent device files from being interpreted on file systems that contain user home directories.DISA Red Hat Enterprise Linux 9 STIG v2r3Unix

CONFIGURATION MANAGEMENT

RHEL-09-231095 - RHEL 9 must mount /boot with the nodev option.DISA Red Hat Enterprise Linux 9 STIG v2r3Unix

CONFIGURATION MANAGEMENT

RHEL-09-231105 - RHEL 9 must prevent files with the setuid and setgid bit set from being executed on the /boot/efi directory.DISA Red Hat Enterprise Linux 9 STIG v2r3Unix

CONFIGURATION MANAGEMENT

RHEL-09-231110 - RHEL 9 must mount /dev/shm with the nodev option.DISA Red Hat Enterprise Linux 9 STIG v2r3Unix

CONFIGURATION MANAGEMENT

RHEL-09-231115 - RHEL 9 must mount /dev/shm with the noexec option.DISA Red Hat Enterprise Linux 9 STIG v2r3Unix

CONFIGURATION MANAGEMENT

RHEL-09-231120 - RHEL 9 must mount /dev/shm with the nosuid option.DISA Red Hat Enterprise Linux 9 STIG v2r3Unix

CONFIGURATION MANAGEMENT

RHEL-09-231125 - RHEL 9 must mount /tmp with the nodev option.DISA Red Hat Enterprise Linux 9 STIG v2r3Unix

CONFIGURATION MANAGEMENT

RHEL-09-231130 - RHEL 9 must mount /tmp with the noexec option.DISA Red Hat Enterprise Linux 9 STIG v2r3Unix

CONFIGURATION MANAGEMENT

RHEL-09-231145 - RHEL 9 must mount /var/log with the nodev option.DISA Red Hat Enterprise Linux 9 STIG v2r3Unix

CONFIGURATION MANAGEMENT

RHEL-09-231150 - RHEL 9 must mount /var/log with the noexec option.DISA Red Hat Enterprise Linux 9 STIG v2r3Unix

CONFIGURATION MANAGEMENT

RHEL-09-231155 - RHEL 9 must mount /var/log with the nosuid option.DISA Red Hat Enterprise Linux 9 STIG v2r3Unix

CONFIGURATION MANAGEMENT

RHEL-09-231160 - RHEL 9 must mount /var/log/audit with the nodev option.DISA Red Hat Enterprise Linux 9 STIG v2r3Unix

CONFIGURATION MANAGEMENT

RHEL-09-231165 - RHEL 9 must mount /var/log/audit with the noexec option.DISA Red Hat Enterprise Linux 9 STIG v2r3Unix

CONFIGURATION MANAGEMENT

RHEL-09-231175 - RHEL 9 must mount /var/tmp with the nodev option.DISA Red Hat Enterprise Linux 9 STIG v2r3Unix

CONFIGURATION MANAGEMENT

RHEL-09-231185 - RHEL 9 must mount /var/tmp with the nosuid option.DISA Red Hat Enterprise Linux 9 STIG v2r3Unix

CONFIGURATION MANAGEMENT

RHEL-09-271030 - RHEL 9 must disable the graphical user interface autorun function unless required.DISA Red Hat Enterprise Linux 9 STIG v2r3Unix

CONFIGURATION MANAGEMENT

RHEL-09-433016 - The RHEL 9 fapolicy module must be configured to employ a deny-all, permit-by-exception policy to allow the execution of authorized software programs.DISA Red Hat Enterprise Linux 9 STIG v2r3Unix

CONFIGURATION MANAGEMENT

WN22-CC-000210 - Windows Server 2022 Autoplay must be turned off for nonvolume devices.DISA Microsoft Windows Server 2022 STIG v2r3Windows

CONFIGURATION MANAGEMENT

WN22-CC-000220 - Windows Server 2022 default AutoRun behavior must be configured to prevent AutoRun commands.DISA Microsoft Windows Server 2022 STIG v2r3Windows

CONFIGURATION MANAGEMENT

WN22-CC-000230 - Windows Server 2022 AutoPlay must be disabled for all drives.DISA Microsoft Windows Server 2022 STIG v2r3Windows

CONFIGURATION MANAGEMENT