bayupermadi / ciscentos7

Scripting to validate the CIS benchmark for Centos 7
3 stars 0 forks source link

6 System Maintenance #6

Open bayupermadi opened 6 years ago

bayupermadi commented 6 years ago

6.1 System File Permissions 6.1.1 Audit system file permissions (Not Scored) 6.1.2 Ensure permissions on /etc/passwd are configured (Scored) 6.1.3 Ensure permissions on /etc/shadow are configured (Scored) 6.1.4 Ensure permissions on /etc/group are configured (Scored) 6.1.5 Ensure permissions on /etc/gshadow are configured (Scored) 6.1.6 Ensure permissions on /etc/passwd- are configured (Scored) 6.1.7 Ensure permissions on /etc/shadow- are configured (Scored) 6.1.8 Ensure permissions on /etc/group- are configured (Scored) 6.1.9 Ensure permissions on /etc/gshadow- are configured (Scored) 6.1.10 Ensure no world writable files exist (Scored) 6.1.11 Ensure no unowned files or directories exist (Scored) 6.1.12 Ensure no ungrouped files or directories exist (Scored) 6.1.13 Audit SUID executables (Not Scored) 6.1.14 Audit SGID executables (Not Scored)

6.2 User and Group Settings 6.2.1 Ensure password fields are not empty (Scored) 6.2.2 Ensure no legacy "+" entries exist in /etc/passwd (Scored) 6.2.3 Ensure no legacy "+" entries exist in /etc/shadow (Scored) 6.2.4 Ensure no legacy "+" entries exist in /etc/group (Scored) 6.2.5 Ensure root is the only UID 0 account (Scored) 6.2.6 Ensure root PATH Integrity (Scored) 6.2.7 Ensure all users' home directories exist (Scored) 6.2.8 Ensure users' home directories permissions are 750 or more restrictive (Scored) 6.2.9 Ensure users own their home directories (Scored) 6.2.10 Ensure users' dot files are not group or world writable (Scored) 6.2.11 Ensure no users have .forward files (Scored) 6.2.12 Ensure no users have .netrc files (Scored) 6.2.13 Ensure users' .netrc Files are not group or world accessible (Scored) 6.2.14 Ensure no users have .rhosts files (Scored) 6.2.15 Ensure all groups in /etc/passwd exist in /etc/group (Scored) 6.2.16 Ensure no duplicate UIDs exist (Scored) 6.2.17 Ensure no duplicate GIDs exist (Scored) 6.2.18 Ensure no duplicate user names exist (Scored) 6.2.19 Ensure no duplicate group names exist (Scored)