CSCv7|5.1

Title

Establish Secure Configurations

Description

Maintain documented, standard security configuration standards for all authorized operating systems and software.

Reference Item Details

Category: Secure Configuration for Hardware and Software on Mobile Devices, Laptops, Workstations and Servers

Audit Items

View all Reference Audit Items

NamePluginAudit Name
1.1.1 Create Separate Partition for /tmpUnixCIS Red Hat Enterprise Linux 5 L1 v2.2.1
1.1.1 Ensure 'Ads setting for sites with intrusive ads' is set to 'Enabled: Block ads on sites with intrusive ads'WindowsCIS Microsoft Edge L1 v1.0.0
1.1.1 Ensure 'Ads setting for sites with intrusive ads' is set to 'Enabled: Block ads on sites with intrusive ads'WindowsCIS Microsoft Edge L1 v1.0.1
1.1.1 Ensure /tmp is configuredUnixCIS Ubuntu Linux 18.04 LXD Container L1 v1.0.0
1.1.1 Ensure mounting of squashfs filesystems is disabled - lsmodUnixCIS Aliyun Linux 2 L1 v1.0.0
1.1.1 Ensure mounting of squashfs filesystems is disabled - modprobeUnixCIS Aliyun Linux 2 L1 v1.0.0
1.1.1 Ensure Security Defaults is enabled on Azure Active Directorymicrosoft_azureCIS Microsoft Azure Foundations v1.5.0 L1
1.1.1 Ensure Security Defaults is enabled on Azure Active Directorymicrosoft_azureCIS Microsoft Azure Foundations v2.0.0 L1
1.1.1 Ensure Security Defaults is enabled on Microsoft Entra IDmicrosoft_azureCIS Microsoft Azure Foundations v2.1.0 L1
1.1.1.1 Ensure mounting of cramfs filesystems is disabled - lsmodUnixCIS Amazon Linux 2 STIG v1.0.0 L1
1.1.1.1 Ensure mounting of cramfs filesystems is disabled - lsmodUnixCIS Amazon Linux 2 v2.0.0 L1
1.1.1.1 Ensure mounting of cramfs filesystems is disabled - lsmodUnixCIS Fedora 19 Family Linux Server L1 v1.0.0
1.1.1.1 Ensure mounting of cramfs filesystems is disabled - lsmodUnixCIS Debian 8 Workstation L1 v2.0.2
1.1.1.1 Ensure mounting of cramfs filesystems is disabled - lsmodUnixCIS Debian Family Workstation L1 v1.0.0
1.1.1.1 Ensure mounting of cramfs filesystems is disabled - lsmodUnixCIS Oracle Linux 7 Server L1 v3.1.1
1.1.1.1 Ensure mounting of cramfs filesystems is disabled - lsmodUnixCIS Oracle Linux 7 Workstation L1 v3.1.1
1.1.1.1 Ensure mounting of cramfs filesystems is disabled - lsmodUnixCIS Oracle Linux 8 Workstation L1 v1.0.1
1.1.1.1 Ensure mounting of cramfs filesystems is disabled - lsmodUnixCIS Ubuntu Linux 20.04 LTS Workstation L1 v1.0.0
1.1.1.1 Ensure mounting of cramfs filesystems is disabled - lsmodUnixCIS Red Hat EL7 Server L1 v3.0.1
1.1.1.1 Ensure mounting of cramfs filesystems is disabled - lsmodUnixCIS Ubuntu Linux 18.04 LXD Host L1 Workstation v1.0.0
1.1.1.1 Ensure mounting of cramfs filesystems is disabled - lsmodUnixCIS Ubuntu Linux 16.04 LTS Server L1 v2.0.0
1.1.1.1 Ensure mounting of cramfs filesystems is disabled - lsmodUnixCIS Debian Family Server L1 v1.0.0
1.1.1.1 Ensure mounting of cramfs filesystems is disabled - lsmodUnixCIS CentOS 7 v3.1.2 Workstation L1
1.1.1.1 Ensure mounting of cramfs filesystems is disabled - lsmodUnixCIS CentOS Linux 8 Workstation L1 v1.0.1
1.1.1.1 Ensure mounting of cramfs filesystems is disabled - lsmodUnixCIS Oracle Linux 8 Server L1 v1.0.1
1.1.1.1 Ensure mounting of cramfs filesystems is disabled - lsmodUnixCIS Red Hat EL7 Server L1 v3.1.1
1.1.1.1 Ensure mounting of cramfs filesystems is disabled - lsmodUnixCIS Red Hat EL8 Server L1 v1.0.1
1.1.1.1 Ensure mounting of cramfs filesystems is disabled - lsmodUnixCIS Red Hat EL8 Workstation L1 v1.0.1
1.1.1.1 Ensure mounting of cramfs filesystems is disabled - lsmodUnixCIS Ubuntu Linux 16.04 LTS Workstation L1 v2.0.0
1.1.1.1 Ensure mounting of cramfs filesystems is disabled - lsmodUnixCIS Ubuntu Linux 18.04 LXD Host L1 LXD v1.0.0
1.1.1.1 Ensure mounting of cramfs filesystems is disabled - lsmodUnixCIS Ubuntu Linux 18.04 LXD Host L1 Server v1.0.0
1.1.1.1 Ensure mounting of cramfs filesystems is disabled - lsmodUnixCIS Distribution Independent Linux Workstation L1 v2.0.0
1.1.1.1 Ensure mounting of cramfs filesystems is disabled - lsmodUnixCIS Fedora 28 Family Linux Server L1 v1.0.0
1.1.1.1 Ensure mounting of cramfs filesystems is disabled - lsmodUnixCIS Debian 8 Server L1 v2.0.1
1.1.1.1 Ensure mounting of cramfs filesystems is disabled - lsmodUnixCIS Debian 8 Server L1 v2.0.2
1.1.1.1 Ensure mounting of cramfs filesystems is disabled - lsmodUnixCIS Debian 8 Workstation L1 v2.0.1
1.1.1.1 Ensure mounting of cramfs filesystems is disabled - lsmodUnixCIS CentOS Linux 8 Workstation L1 v1.0.0
1.1.1.1 Ensure mounting of cramfs filesystems is disabled - lsmodUnixCIS Oracle Linux 8 Server L1 v1.0.0
1.1.1.1 Ensure mounting of cramfs filesystems is disabled - lsmodUnixCIS Oracle Linux 8 Workstation L1 v1.0.0
1.1.1.1 Ensure mounting of cramfs filesystems is disabled - lsmodUnixCIS Red Hat Enterprise Linux 7 STIG v2.0.0 L1 Workstation
1.1.1.1 Ensure mounting of cramfs filesystems is disabled - lsmodUnixCIS Red Hat EL7 Workstation L1 v3.0.1
1.1.1.1 Ensure mounting of cramfs filesystems is disabled - lsmodUnixCIS Ubuntu Linux 20.04 LTS Workstation L1 v1.1.0
1.1.1.1 Ensure mounting of cramfs filesystems is disabled - lsmodUnixCIS Ubuntu Linux 20.04 LTS Server L1 v1.0.0
1.1.1.1 Ensure mounting of cramfs filesystems is disabled - lsmodUnixCIS AlmaLinux OS 8 Server L1 v1.0.0
1.1.1.1 Ensure mounting of cramfs filesystems is disabled - lsmodUnixCIS AlmaLinux OS 8 Workstation L1 v1.0.0
1.1.1.1 Ensure mounting of cramfs filesystems is disabled - lsmodUnixCIS CentOS 7 v3.1.1 Server L1
1.1.1.1 Ensure mounting of cramfs filesystems is disabled - lsmodUnixCIS CentOS Linux 8 Server L1 v1.0.0
1.1.1.1 Ensure mounting of cramfs filesystems is disabled - lsmodUnixCIS CentOS Linux 8 Server L1 v1.0.1
1.1.1.1 Ensure mounting of cramfs filesystems is disabled - lsmodUnixCIS Fedora 19 Family Linux Workstation L1 v1.0.0
1.1.1.1 Ensure mounting of UDF filesystems is disabledUnixCIS Bottlerocket L2