CIS_Amazon_Linux_2_Benchmarks

Ensure sshd PermitEmptyPasswords Is Disabled
Profile Applicability:  • Level 1 Description:  The PermitEmptyPasswords option in the SSH daemon (sshd) configuration determines whether SSH allows login ...
Mon, 2 Jun, 2025 at 1:56 AM
Ensure sshd PermitRootLogin Is Disabled
Profile Applicability:  • Level 1 Description: The PermitRootLogin option in the SSH daemon (sshd) configuration controls whether the root user can log in ...
Mon, 2 Jun, 2025 at 2:46 AM
Ensure sshd PermitUserEnvironment Is Disabled
Profile Applicability:  • Level 1 Description:  The PermitUserEnvironment option in the SSH daemon (sshd) configuration allows users to set environment var...
Mon, 2 Jun, 2025 at 3:03 AM
Ensure sshd UsePAM Is Enabled
Profile Applicability:  • Level 1 Description:  The UsePAM option in the SSH daemon (sshd) configuration enables Pluggable Authentication Modules (PAM) for...
Mon, 2 Jun, 2025 at 3:51 AM
Ensure Logging Is Configured
Profile Applicability:  • Level 1 Description: Proper logging configuration ensures that system events, security incidents, and application activities are ...
Mon, 2 Jun, 2025 at 4:16 AM
Ensure sudo Is Installed
Profile Applicability:  • Level 1 Description:  The sudo package allows users to execute commands with elevated privileges in a controlled manner. Ensuring...
Mon, 2 Jun, 2025 at 4:20 AM
Ensure sudo Commands Use pty
Profile Applicability:  • Level 1 Description:  Configuring sudo to use a pseudo-terminal (pty) ensures that all commands executed via sudo are run in a co...
Mon, 2 Jun, 2025 at 4:29 AM
Ensure rsyslog Is Configured to Send Logs to a Remote Log Host
Profile Applicability:  • Level 1 Description:  Configuring rsyslog to forward logs to a remote log host centralizes log collection, enabling enhanced secu...
Mon, 2 Jun, 2025 at 4:44 AM
Ensure journald Is Configured to Compress Large Log Files
Profile Applicability:  • Level 1 Description:  Compressing large log files in systemd’s journal (journald) reduces disk space usage by minimizing the stor...
Mon, 2 Jun, 2025 at 4:52 AM
Ensure sudo Log File Exists
Profile Applicability:  • Level 1 Description:  The sudo log file captures all commands executed with elevated privileges, providing critical audit informa...
Mon, 2 Jun, 2025 at 4:52 AM