Ubuntu 16.04 安全加固列表。
Table of Contents
Terms of Use ........................................................................................................................................................... 1
Overview ............................................................................................................................................................... 12
Intended Audience ........................................................................................................................................ 12
Consensus Guidance ..................................................................................................................................... 12
Typographical Conventions ...................................................................................................................... 14
Scoring Information ..................................................................................................................................... 14
Profile Definitions ......................................................................................................................................... 15
Acknowledgements ...................................................................................................................................... 17
Recommendations ............................................................................................................................................. 19
1 Initial Setup .................................................................................................................................................. 19
1.1 Filesystem Configuration ............................................................................................................... 19
1.1.1.1 Ensure mounting of cramfs filesystems is disabled (Scored) .............................. 20
1.1.1.2 Ensure mounting of freevxfs filesystems is disabled (Scored)............................ 22
1.1.1.3 Ensure mounting of jffs2 filesystems is disabled (Scored) ................................... 23
1.1.1.4 Ensure mounting of hfs filesystems is disabled (Scored) ...................................... 24
1.1.1.5 Ensure mounting of hfsplus filesystems is disabled (Scored) ............................. 25
1.1.1.6 Ensure mounting of udf filesystems is disabled (Scored) ..................................... 26
1.1.2 Ensure separate partition exists for /tmp (Scored) .................................................... 27
1.1.3 Ensure nodev option set on /tmp partition (Scored) ................................................. 29
1.1.4 Ensure nosuid option set on /tmp partition (Scored) ................................................ 30
1.1.5 Ensure separate partition exists for /var (Scored) ..................................................... 31
1.1.6 Ensure separate partition exists for /var/tmp (Scored) ........................................... 32
1.1.7 Ensure nodev option set on /var/tmp partition (Scored) ........................................ 34
1.1.8 Ensure nosuid option set on /var/tmp partition (Scored) ....................................... 35
1.1.9 Ensure noexec option set on /var/tmp partition (Scored) ...................................... 36
1.1.10 Ensure separate partition exists for /var/log (Scored) .......................................... 37
1.1.11 Ensure separate partition exists for /var/log/audit (Scored) ............................. 39
1.1.12 Ensure separate partition exists for /home (Scored) .............................................. 41
1.1.13 Ensure nodev option set on /home partition (Scored) ........................................... 42
