CIS_Amazon_Linux_2_Benchmarks

Ensure /var/log Directory is Mounted on a Separate Partition
Profile Applicability:  • Level 2 Description:  The /var/log directory stores system and application log files. Mounting /var/log on a separate partition i...
Thu, 22 May, 2025 at 1:18 AM
Ensure nodev Mount Option is Set on /var/log Partition to Enhance Security
Profile Applicability:  • Level 1 Description:  The nodev mount option prevents device files from being interpreted on the mounted filesystem. Applying thi...
Thu, 22 May, 2025 at 1:23 AM
Ensure nosuid Mount Option is Set on /var/log Partition to Prevent Privilege Escalation
Profile Applicability:  • Level 1 Description:  The nosuid mount option prevents the operation of set-user-identifier (setuid) and set-group-identifier (se...
Thu, 22 May, 2025 at 2:11 AM
Ensure noexec Mount Option is Set on /var/log Partition to Prevent Execution of Binaries
Profile Applicability:  • Level 1 Description:  The noexec mount option prevents execution of binaries on the mounted filesystem. Applying this option to /...
Thu, 22 May, 2025 at 2:15 AM
Ensure /var/log/audit Directory is Mounted on a Separate Partition
Profile Applicability:  • Level 2 Description:  The /var/log/audit directory stores audit logs generated by the Linux audit system. Mounting /var/log/audit...
Thu, 22 May, 2025 at 2:21 AM
Ensure Audit Logging of Kernel Module Load, Unload, and Modification Events
Profile Applicability:  • Level 2 Description:  Kernel modules extend the functionality of the operating system. Monitoring and auditing module loading, un...
Thu, 22 May, 2025 at 2:25 AM
Ensure nodev Mount Option is Set on /var/log/audit Partition to Enhance Security
Profile Applicability:  • Level 1 Description:  The nodev mount option prevents device files from being interpreted on the mounted filesystem. Applying thi...
Thu, 22 May, 2025 at 2:25 AM
Ensure nosuid Mount Option is Set on /var/log/audit Partition to Prevent Privilege Escalation
Profile Applicability:  • Level 1 Description:  The nosuid mount option prevents the operation of set-user-identifier (setuid) and set-group-identifier (se...
Thu, 22 May, 2025 at 2:30 AM
Ensure noexec Mount Option is Set on /var/log/audit Partition to Prevent Execution of Binaries
Profile Applicability:  • Level 1 Description:  The noexec mount option prevents execution of binaries on the mounted filesystem. Applying this option to /...
Thu, 22 May, 2025 at 2:34 AM
Ensure Audit Configuration is Set to Immutable
Profile Applicability:  • Level 2 Description: Setting the audit configuration as immutable prevents unauthorized changes to the audit rules, ensuring cont...
Thu, 22 May, 2025 at 2:35 AM