Independent baseline-to-hardened verification report
Verification gate: passed
Both independent audits must contain exactly the expected reviewed control set.
| Control | Severity | Baseline | Hardened verification |
|---|---|---|---|
| Build and Test AIDE Database | medium | fail | pass |
| Configure AIDE to Verify the Audit Tools | medium | fail | pass |
| Ensure Local Login Warning Banner Is Configured Properly | medium | fail | pass |
| Ensure Remote Login Warning Banner Is Configured Properly | medium | fail | pass |
| Disable core dump backtraces | medium | fail | pass |
| Disable storing core dump | medium | fail | pass |
| Disable Core Dumps for All Users | medium | fail | pass |
| Ensure journald is configured to compress large log files | medium | fail | pass |
| Ensure journald ForwardToSyslog is disabled | medium | fail | pass |
| Ensure journald is configured to write log files to persistent disk | medium | fail | pass |
| Disable Mounting of cramfs | low | fail | pass |
| Disable Mounting of freevxfs | low | fail | pass |
| Disable Mounting of hfs | low | fail | pass |
| Disable Mounting of hfsplus | low | fail | pass |
| Disable Mounting of jffs2 | low | fail | pass |
| Disable Modprobe Loading of USB Storage Driver | medium | fail | pass |
| Add nodev Option to /dev/shm | medium | fail | pass |
| Add noexec Option to /dev/shm | medium | fail | pass |
| Add nosuid Option to /dev/shm | medium | fail | pass |
| Install AIDE | medium | fail | pass |
| Ensure rsyslog Default File Permissions Configured | medium | fail | pass |
| Ensure System Log Files Have Correct Permissions | medium | fail | pass |
| Disable Core Dumps for SUID programs | medium | fail | pass |
| Restrict Access to Kernel Message Buffer | low | fail | pass |
| Enable Randomized Layout of Virtual Address Space | medium | fail | pass |
| Restrict usage of ptrace to descendant processes | medium | fail | pass |
Controls that still fail in the independent hardened verification, including unchanged failures.
| Control | Severity | Baseline | Hardened verification |
|---|---|---|---|
| No remaining failed controls. | |||