国外安全加固安全加固cis_ubuntu_linux_14 04_lts_benchmark_v2 1 0.pdf

CIS Ubuntu Linux 14.04 LTS Benchmark v2.1.0 - 12-28-2017 Terms of Use This work is licensed under a Creative Commons Attribution-NonCommercial-ShareAlike 4.0 International Public License. The link to the license terms can be found at To further clarify the Creative Commons license related to CIS Benchmark content, you are authorized to copy and redistribute the content for use by you, within your organization and outside your organization for non-commercial purposes only, provided that (i) appropriate credit is given to CIS, (ii) a link to the license is provided. Additionally, if you remix, transform or build upon the CIS Benchmark(s), you may only distribute the modified materials if they are subject to the same license terms as the original Benchmark license and your derivative will no longer be a CIS Benchmark. Commercial u f CIS Benchmarks is subject to the prior approval of the Center for Internet Security. 1 | P a g e Table of Contents Terms of Use 1 Overview 12 Intended Audience 12 Consensus Guidance 12 Typographical Conventions 14 Scoring Information 14 Profile Definitions 15 Acknowledgements 17 Recommendations 19 1 Initial Setup 19 1.1 Filesystem Configuration 19 Ensure mounting of cramfs filesystems is disabled (Scored) 20 Ensure mounting of freevxfs filesystems is disabled (Scored) 22 Ensure mounting of jffs2 filesystems is disabled (Scored) 23 Ensure mounting of hfs filesystems is disabled (Scored) 24 Ensure mounting of hfsplus filesystems is disabled (Scored) 25 Ensure mounting of udf filesystems is disabled (Scored) 26 1.1.2 Ensure separate par ion exists for /tmp (Scored) 27 1.1.3 Ensure nodev option set on /tmp par