Item Search

NameAudit NamePluginCategory
1.2 Use IP address rather than hostnameCIS IBM DB2 v10 v1.1.0 Linux OS Level 2Unix

CONFIGURATION MANAGEMENT

1.4.2 - Remote daemon lockdown - 'rlogind mode 000'CIS AIX 5.3/6.1 L2 v1.1.0Unix
1.7.6 - Miscellaneous Enhancements - crontab permissions - '/usr/lib/ras/dumpcheck 755'CIS AIX 5.3/6.1 L1 v1.1.0Unix
2.0.1 Secure DB2 Runtime LibraryCIS IBM DB2 OS L1 v1.2.0Unix
2.3.2 - MobileIron - Require Use Only in Mail for Sensitive Mail Accounts - EMAIL ConfigurationsMobileIron - CIS Apple iOS 9 v1.0.0 L2MDM

ACCESS CONTROL

2.3.2 RedHat bind-chroot Rpm '/var/named/chroot/var/log'CIS ISC BIND 9.0/9.5 v2.0.0Unix
2.6.4 - NIS - restrict NIS server communications - '/var/yp/securenets mode 600'CIS AIX 5.3/6.1 L2 v1.1.0Unix
2.11.6 - Permissions and Ownership - '/smit.log root:system 640'CIS AIX 5.3/6.1 L1 v1.1.0Unix
2.11.15 - Permissions and Ownership - '/var/tmp/hostmibd.log root:system 640'CIS AIX 5.3/6.1 L1 v1.1.0Unix
2.11.19 - Permissions and Ownership - home directory configuration files are not world writable - '~/.dispatch is not world writable'CIS AIX 5.3/6.1 L1 v1.1.0Unix
2.11.19 - Permissions and Ownership - home directory configuration files are not world writable - '~/.exrc is not world writable'CIS AIX 5.3/6.1 L1 v1.1.0Unix
2.20 Disable Mounting of jffs2 FilesystemsCIS Debian Linux 7 L2 v1.0.0Unix

CONFIGURATION MANAGEMENT

3.1.14 Set failed archive retry delayCIS IBM DB2 v10 v1.1.0 Windows OS Level 1Windows

CONFIGURATION MANAGEMENT

3.1.15 Auto-restart after abnormal terminationCIS IBM DB2 v10 v1.1.0 Linux OS Level 1Unix

CONFIGURATION MANAGEMENT

3.1.15 Auto-restart after abnormal terminationCIS IBM DB2 v10 v1.1.0 Windows OS Level 1Windows

CONFIGURATION MANAGEMENT

3.1.16 Disable database discoveryCIS IBM DB2 v10 v1.1.0 Windows OS Level 2Windows

CONFIGURATION MANAGEMENT

3.1.17 Reserve the desired port number or name for incoming connection requestsCIS IBM DB2 9 Benchmark v3.0.1 Level 2 OS LinuxUnix

CONFIGURATION MANAGEMENT

3.1.18 Reserve the desired port number or name for incoming SSL connectionsCIS IBM DB2 9 Benchmark v3.0.1 Level 2 OS WindowsWindows

CONFIGURATION MANAGEMENT

3.2.5 Secure permission of the primary archive log locationCIS IBM DB2 OS L1 v1.2.0Unix
3.2.7 Secure permission of the secondary archive log locationCIS IBM DB2 OS L1 v1.2.0Unix
3.2.9 Secure permission of the tertiary archive locationCIS IBM DB2 OS L1 v1.2.0Unix
3.3.2 Set a generic system nameCIS IBM DB2 9 Benchmark v3.0.1 Level 2 OS WindowsWindows

CONFIGURATION MANAGEMENT

3.05 init.ora - 'Verify and restrict permissions'CIS v1.1.0 Oracle 11g OS Windows Level 1Windows
3.7 Verify that Docker environment file ownership is set to root:rootCIS Docker 1.6 v1.0.0 L1 DockerUnix

CONFIGURATION MANAGEMENT

3.08 init.ora - 'Verify permissions of file referenced by ifile parameter'CIS v1.1.0 Oracle 11g OS Windows Level 1Windows
3.09 init.ora - 'audit_file_dest parameter settings'CIS v1.1.0 Oracle 11g OS L1Unix
3.11 init.ora - 'control_file parameter settings'CIS v1.1.0 Oracle 11g OS Windows Level 1Windows
3.12 init.ora - 'log_archive_dest_n parameter settings'CIS v1.1.0 Oracle 11g OS L1Unix
3.13 Files in $ORACLE_HOME/network/admin directory - 'Verify and set permissions'CIS v1.1.0 Oracle 11g OS L1Unix
3.14 sqlnet.ora - 'Verify and set permissions with read permissions for everyone'CIS v1.1.0 Oracle 11g OS Windows Level 1Windows
3.15 sqlnet.ora - 'log_directory_client parameter settings'CIS v1.1.0 Oracle 11g OS L1Unix
3.17 sqlnet.ora - 'trace_directory_client parameter settings'CIS v1.1.0 Oracle 11g OS Windows Level 1Windows
3.20 Verify that TLS CA certificate file permissions are set to 444 or more restrictiveCIS Docker 1.6 v1.0.0 L1 DockerUnix

CONFIGURATION MANAGEMENT

3.25 dads.conf - 'Verify and set permissions'CIS v1.1.0 Oracle 11g OS Windows Level 1Windows
3.26 xsqlconfig.xml - 'Verify and set permissions'CIS v1.1.0 Oracle 11g OS Windows Level 1Windows
4.7 Enable cron Logging - Check if permissions for /var/cron/log are OK.CIS Solaris 10 L1 v5.2Unix

AUDIT AND ACCOUNTABILITY

5.2 Turn on additional logging for FTP daemon - Check if file /etc/inet/inetd.conf exists.CIS Solaris 9 v1.3Unix
6.7 Set Default Screen Lock for CDE Users - Check if file permissions for files under /etc/dt/config/*/sys.resources are OK.CIS Solaris 10 L1 v5.2Unix

ACCESS CONTROL

7.5 Set "mesg n" as Default for All Users - /etc/profile mesg = nCIS Solaris 11.2 L1 v1.1.0Unix

CONFIGURATION MANAGEMENT

8.0.7 Secure the permission of the IBMLDAPSecurity.ini fileCIS IBM DB2 OS L2 v1.2.0Unix
8.1 Create Warnings for Standard Login Services - etc/motd permsCIS Solaris 11.2 L1 v1.1.0Unix

CONFIGURATION MANAGEMENT

8.1 Create Warnings for Standard Login Services - etc/issue permsCIS Solaris 11.2 L1 v1.1.0Unix

CONFIGURATION MANAGEMENT

8.2 Restrict access to starting and stopping the DB2 administration serverCIS IBM DB2 9 Benchmark v3.0.1 Level 2 OS LinuxUnix

ACCESS CONTROL

8.4 Create warnings for FTP daemon - Check if permissions for /etc/ftpd/banner.msg are OK. Applicable only for Solaris 2.6 or laterCIS Solaris 10 L1 v5.2Unix

ACCESS CONTROL

9.3.3 Set Permissions on /etc/ssh/sshd_configCIS Debian Linux 7 L1 v1.0.0Unix

CONFIGURATION MANAGEMENT

9.3.10 Do Not Allow Users to Set Environment OptionsCIS Debian Linux 7 L1 v1.0.0Unix

CONFIGURATION MANAGEMENT

9.12 Check That Users Are Assigned Home DirectoriesCIS Solaris 11.1 L1 v1.0.0Unix

CONFIGURATION MANAGEMENT

9.14 Check User Home Directory OwnershipCIS Solaris 11 L1 v1.1.0Unix

CONFIGURATION MANAGEMENT

13.9 Check Permissions on User .netrc FilesCIS Debian Linux 7 L1 v1.0.0Unix

CONFIGURATION MANAGEMENT

13.13 Check User Home Directory OwnershipCIS Debian Linux 7 L1 v1.0.0Unix

CONFIGURATION MANAGEMENT