os-security-hub

README

OS Security Hub

A comprehensive security auditing and hardening toolkit for multiple operating systems. Features automated compliance checks and security assessment tools based on industry standards and official security guidelines.

Ubuntu

Tested on 22.04 LTS (Jammy Jellyfish)

Version	Released	End of Standard Support	End of Ubuntu Pro Support	End of Legacy Support
22.04 LTS (Jammy Jellyfish)	Apr 2022	Apr 2027	Apr 2032	Apr 2034

240328_CIS_Ubuntu Linux 22.04 LTS Benchmark v2.0.0

• Initail Setup
• (Initial Setup) 1.1.1.1 Ensure cramfs kernel module is not available (Automated)

XenServer

Tested on XenServer release 8.4.0 (xenenterprise)

Product	Version	Language	NSC	EOS	EOM & EOL	Notes
XenServer	8	EN	03-26-2024	06-03-2024	11-30-2028	XenServer specific licence required

• Account
• (Account) Default Account Check
• (Account) Root Privilege Account Detection
• (Account) Password File Permission Check
• (Account) Group File Permissions Check
• (Account) Password Policy Check
• (Account) System Account Shell Restriction Check
• (Account) SU Command Restriction Check
• File System
• (File System) UMASK Default Configuration Check
• (File System) XSConsole File Permission Check
• (File System) Profile File Permission Check
• (File System) Hosts File Permission Check
• (File System) Issue File Permission Check
• (File System) Dump Command SUID/SGID Permission Check
• (File System) Home Directory and Configuration Files Permission Check
• (File System) Crontab File Permission Check
• (File System) Root PATH Environment Variable Check
• (File System) Service File Permission Check
• Network and Major App
• (Network and Major App) Session Timeout Configuration Check
• (Network and Major App) echo (7) Service Status Check
• (Network and Major App) discard (9) Service Status Check
• (Network and Major App) daytime (13) Service Status Check
• (Network and Major App) chargen (19) Service Status Check
• (Network and Major App) time (37) Service Status Check
• (Network and Major App) tftp (69) Service Status Check
• (Network and Major App) finger (79) Service Status Check
• (Network and Major App) sftp (115) Service Status Check
• (Network and Major App) PAM and SSH Configuration Check for Root Remote Access Control
• Logging
• (Logging) Authpriv Log Configuration Check
• (Logging) UDP Syslog Transfer Port (514) Security Check
• (Logging) Audit Log File Permission Check
• (Logging) Failed Login Attempts Log (btmp) Permission Check
• (Logging) XenStore Access Log Permission Check
• (Logging) Secure Log File Permission Check