Item Search

NameAudit NamePluginCategory
1.4.1 - Remote command lockdown - 'rcp mode 000'CIS AIX 5.3/6.1 L2 v1.1.0Unix
1.4.2 - Remote daemon lockdown - 'tftpd mode 000'CIS AIX 5.3/6.1 L2 v1.1.0Unix
2.1 Secure DB2 Runtime LibraryCIS IBM DB2 v10 v1.1.0 Linux OS Level 1Unix
2.1 Secure DB2 Runtime LibraryCIS IBM DB2 v10 v1.1.0 Windows OS Level 1Windows
2.2 Secure the database container directoryCIS IBM DB2 9 Benchmark v3.0.1 Level 1 OS WindowsWindows
2.4.3 - CDE - sgid/suid binary lockdown - '/usr/dt/bin/dtaction root:sys 555'CIS AIX 5.3/6.1 L1 v1.1.0Unix
2.8 Minimize the inetd.conf fileCIS FreeBSD v1.0.5Unix
2.11.7 - Permissions and Ownership - '/var/adm/cron/log root:cron 660'CIS AIX 5.3/6.1 L1 v1.1.0Unix
2.11.12 - Permissions and Ownership - '/var/adm/ras/* files are not world readable or writable'CIS AIX 5.3/6.1 L1 v1.1.0Unix
2.11.13 - Permissions and Ownership - '/var/ct/RMstart.log root:system 640'CIS AIX 5.3/6.1 L1 v1.1.0Unix
2.11.19 - Permissions and Ownership - home directory configuration files are not world writable - '~/.emacs is not world writable'CIS AIX 5.3/6.1 L1 v1.1.0Unix
2.12.8 - Miscellaneous Config - enable sar accounting - '/var/adm/sa adm:adm 755'CIS AIX 5.3/6.1 L2 v1.1.0Unix
3.1.5 Secure permissions for default database file pathCIS IBM DB2 v10 v1.1.0 Windows OS Level 2Windows
3.1.5 Secure permissions for default database file path (Scored)CIS IBM DB2 v10 v1.1.0 Linux OS Level 2Unix
3.1.7 Secure permissions for all diagnostic logsCIS IBM DB2 v10 v1.1.0 Linux OS Level 1Unix
3.1.7 Secure permissions for all diagnostic logsCIS IBM DB2 v10 v1.1.0 Windows OS Level 1Windows
3.1.7 Secure permissions for all diagnostic logsCIS IBM DB2 v10 v1.1.0 Linux OS Level 2Unix
3.1.9 Require instance name for discovery requestsCIS IBM DB2 9 Benchmark v3.0.1 Level 1 DBIBM_DB2DB
3.1.19 Secure permissions for the tertiary archive log location - FAILARCHPATH OS PermissionCIS IBM DB2 v10 v1.1.0 Linux OS Level 1Unix
3.2 Set daemon umask - make sure /etc/default/init permissions are OKCIS Solaris 9 v1.3Unix
3.3 Disable inetd if possible, Check if file permissions for /etc/init.d/newinetsvc are OK.CIS Solaris 9 v1.3Unix
3.3.2 Include TSIG key in named.conf 'TSIG key 1 permissions'CIS ISC BIND 9.0/9.5 v2.0.0Unix
3.3.2 Include TSIG key in named.conf 'TSIG key 2 permissions'CIS ISC BIND 9.0/9.5 v2.0.0Unix
3.5 Disable boot services if possible - Ensure file /etc/rc3.d/.NOS16boot.server exists (Solaris 9)CIS Solaris 9 v1.3Unix
3.6 Disable other standard boot services - Ensure file /etc/rc2.d/.NOS70uucp exists.CIS Solaris 9 v1.3Unix
3.6 Disable other standard boot services - Ensure file /etc/rc2.d/.NOS72autoinstall exists.CIS Solaris 9 v1.3Unix
3.6 Disable other standard boot services - Ensure file /etc/rc2.d/.NOS73cachefs.daemon exists.CIS Solaris 9 v1.3Unix
3.6 Disable other standard boot services - Ensure file /etc/rc2.d/.NOS85power exists.CIS Solaris 9 v1.3Unix
4.8 Enable System Accounting - Check for files in /var/adm/saCIS Solaris 10 L1 v5.2Unix
5.1 Capture ftpd and inetd informationCIS FreeBSD v1.0.5Unix
5.2 Enable system accounting (/var/account/acct)CIS FreeBSD v1.0.5Unix
5.4 Capture messages sent to syslog AUTH facility - Check if /var/log/authlog permissions are OK.CIS Solaris 9 v1.3Unix
5.6 Configure periodic log files (/etc/periodic.conf)CIS FreeBSD v1.0.5Unix
5.9 Confirm permissions on system log files, should pass if /var/adm/loginlog permissions are OK.CIS Solaris 9 v1.3Unix
5.9 Confirm permissions on system log files, should pass if /var/log/authlog permissions are OK.CIS Solaris 9 v1.3Unix
6.2 Verify passwd, master.passwd, and group file permissions (/etc/pwd.db)CIS FreeBSD v1.0.5Unix
6.2 Verify passwd, master.passwd, and group file permissions (/etc/spwd.db)CIS FreeBSD v1.0.5Unix
7.3 Remove .rhosts support in /etc/pam.conf, Check if file permissions for /etc/pam.conf are OK.CIS Solaris 9 v1.3Unix
7.4 Create /etc/ftpd/ftpusers, Check if file permissions for /etc/ftpd/ftpusers are OK.CIS Solaris 9 v1.3Unix
7.5 Prevent Syslog from accepting messages from network, Check if file permissions for /etc/default/syslogd are OK.CIS Solaris 9 v1.3Unix
7.13 Set EEPROM security-mode and log failed access, Note: This check is not applicable to Solaris 9 systems running on x86 platform.CIS Solaris 9 v1.3Unix
8.7 Secure the permissions of the IBMLDAPSecurity.ini fileCIS IBM DB2 9 Benchmark v3.0.1 Level 1 OS LinuxUnix
8.7 Secure the permissions of the IBMLDAPSecurity.ini fileCIS IBM DB2 9 Benchmark v3.0.1 Level 1 OS WindowsWindows
9.6 Secure the permission of the IBMLDAPSecurity.ini fileCIS IBM DB2 v10 v1.1.0 Windows OS Level 2Windows
9.7 Secure the permission of the SSLconfig.ini fileCIS IBM DB2 v10 v1.1.0 Linux OS Level 2Unix
9.9 Secure plug-in library locations - clientCIS IBM DB2 v10 v1.1.0 Windows OS Level 2Windows
9.9 Secure plug-in library locations - serverCIS IBM DB2 v10 v1.1.0 Windows OS Level 1Windows
11.3 Samba: Set Group Ownership of smb.conf FileCIS Solaris 10 L2 v5.2Unix
11.5 Samba: Set Group Ownership of smbpasswd FileCIS Solaris 10 L2 v5.2Unix
11.6 Samba: Set Secure smb.conf File Options - ownerCIS Solaris 10 L2 v5.2Unix