CIS_Amazon_Linux_2_Benchmarks

Ensure /home Directory is Mounted on a Separate Partition
Profile Applicability:  • Level 2 Description:  The /home directory contains user home directories and personal data. Mounting /home on a separate partitio...
Thu, 22 May, 2025 at 12:22 AM
Ensure nodev Mount Option is Set on /home Partition to Enhance Security
Profile Applicability:  • Level 1 Description:  The nodev mount option prevents device files from being interpreted on the mounted filesystem. Applying thi...
Thu, 22 May, 2025 at 12:28 AM
Ensure nosuid Mount Option is Set on /home Partition to Prevent Privilege Escalation
Profile Applicability:  • Level 1 Description:  The nosuid mount option prevents the operation of set-user-identifier (setuid) and set-group-identifier (se...
Thu, 22 May, 2025 at 12:32 AM
Ensure /var Directory is Mounted on a Separate Partition
Profile Applicability:  • Level 2 Description:  The /var directory contains variable data files such as logs, spool files, and caches. Mounting /var on a s...
Thu, 22 May, 2025 at 12:38 AM
Ensure nodev Mount Option is Set on /var Partition to Enhance Security
Profile Applicability: • Level 1 Description:  The nodev mount option prevents device files from being interpreted on the mounted filesystem. Applying thi...
Thu, 22 May, 2025 at 12:45 AM
Ensure nosuid Mount Option is Set on /var Partition to Prevent Privilege Escalation
Profile Applicability:  • Level 1 Description:  The nosuid mount option prevents the operation of set-user-identifier (setuid) and set-group-identifier (se...
Thu, 22 May, 2025 at 12:49 AM
Ensure /var/tmp Directory is Mounted on a Separate Partition
Profile Applicability:  • Level 2 Description:  The /var/tmp directory is used for temporary files that are preserved between system reboots. Mounting /var...
Thu, 22 May, 2025 at 12:56 AM
Ensure nodev Mount Option is Set on /var/tmp Partition to Enhance Security
Profile Applicability:  • Level 1 Description:  The nodev mount option prevents device files from being interpreted on the mounted filesystem. Applying thi...
Thu, 22 May, 2025 at 1:02 AM
Ensure nosuid Mount Option is Set on /var/tmp Partition to Prevent Privilege Escalation
Profile Applicability:  • Level 1 Description:  The nosuid mount option prevents the operation of set-user-identifier (setuid) and set-group-identifier (se...
Thu, 22 May, 2025 at 1:07 AM
Ensure noexec Mount Option is Set on /var/tmp Partition to Prevent Execution of Binaries
Profile Applicability:  • Level 1 Description:  The noexec mount option prevents execution of binaries on the mounted filesystem. Applying this option to /...
Thu, 22 May, 2025 at 1:12 AM