CIS_Amazon_Linux_2_Benchmarks

Ensure Default User umask Is Configured
Profile Applicability:  • Level 1 Description:  The umask setting determines the default file permission mask for newly created files and directories. Conf...
Fri, 30 May, 2025 at 3:16 AM
Ensure rsyslog Is Installed
Profile Applicability:  • Level 1 Description:  rsyslog is a powerful syslog daemon that provides system logging capabilities for Linux systems. Ensuring i...
Fri, 30 May, 2025 at 3:20 AM
Ensure rsyslog Service Is Enabled
Profile Applicability:  • Level 1 Description:  The rsyslog service provides system logging functionality. Enabling the service ensures that logs are colle...
Fri, 30 May, 2025 at 3:25 AM
Ensure journald Is Configured to Send Logs to rsyslog
Profile Applicability:  • Level 1 Description:  Configuring journald to forward logs to rsyslog enables centralized log management and compatibility with t...
Fri, 30 May, 2025 at 3:30 AM
Ensure Auditing for Processes That Start Prior to auditd Is Enabled
Profile Applicability: Level 2 Description: In some cases, processes may start before the auditd service is initialized. Ensuring auditing for these proc...
Fri, 30 May, 2025 at 3:32 AM
Ensure audit_backlog_limit is sufficient (Automated)
Profile Applicability: Level 2 Description: In some cases, processes may start before the auditd service is initialized. Ensuring auditing for these proc...
Fri, 30 May, 2025 at 3:49 AM
Ensure auditd service is enabled (Automated)
Profile Applicability: Level 1 Description: The auditd service is responsible for writing audit records to disk. If this service is not enabled, audit ev...
Fri, 30 May, 2025 at 4:06 AM
Ensure audit log storage size is configured (Automated)
Profile Applicability: Level 2 Description: The max_log_file parameter in the audit daemon’s configuration file controls the maximum size of the audit lo...
Fri, 30 May, 2025 at 4:13 AM
Ensure audit logs are not automatically deleted (Automated)
Profile Applicability: Level 2 Description: The max_log_file_action parameter in the audit daemon’s configuration determines what action to take when the...
Fri, 30 May, 2025 at 4:24 AM
Ensure system is disabled when audit logs are full (Automated)
Profile Applicability: Level 2 Description: The space_left_action and admin_space_left_action parameters in the auditd configuration determine what happe...
Fri, 30 May, 2025 at 4:32 AM