https://secscan.acron.pl/ 2026-08-31T08:48:45+00:00 https://secscan.acron.pl/ https://secscan.acron.pl/lib/tpl/bootstrap3/images/favicon.ico text/html 2017-05-06T15:26:04+00:00 Anonymous (anonymous@undisclosed.example.com) https://secscan.acron.pl/centos7/1/1?rev=1494077164&do=diff 1.1 Filesystem Configuration List of content 1 index Description Directories that are used for system-wide functions can be further protected by placing them on separate partitions. This provides protection for resource exhaustion and enables the use of mounting options that are applicable to the directory's intended use. Users' data can be stored on separate partitions and have stricter mount options. A user partition is a filesystem that has been established for use by the users and does n… text/html 2017-05-06T15:25:24+00:00 Anonymous (anonymous@undisclosed.example.com) https://secscan.acron.pl/centos7/1/2?rev=1494077124&do=diff 1.2 Configure Software Updates List of content 2 index Description CentOS 7 uses yum to install and update software packages. Patch management procedures may vary widely between enterprises. Large enterprises may choose to install a local updates server that can be used in place of CentOS's servers, whereas a single deployment of a system may prefer to get updates directly. Updates can be performed automatically or manually, depending on the site's policy for patch management. Many large ent… text/html 2017-05-06T15:25:04+00:00 Anonymous (anonymous@undisclosed.example.com) https://secscan.acron.pl/centos7/1/3?rev=1494077104&do=diff 1.3 Filesystem Integrity Checking List of content 3 index Description AIDE is a file integrity checking tool, similar in nature to Tripwire. While it cannot prevent intrusions, it can detect unauthorized changes to configuration files by alerting when the files are changed. When setting up AIDE, decide internally what the site policy will be concerning integrity checking. Review the AIDE quick start guide and AIDE documentation before proceeding. text/html 2017-05-06T15:24:48+00:00 Anonymous (anonymous@undisclosed.example.com) https://secscan.acron.pl/centos7/1/4?rev=1494077088&do=diff 1.4 Secure Boot Settings List of content 4 index Description The recommendations in this section focus on securing the bootloader and settings involved in the boot process directly. text/html 2017-05-06T15:24:30+00:00 Anonymous (anonymous@undisclosed.example.com) https://secscan.acron.pl/centos7/1/5?rev=1494077070&do=diff 1.5 Additional Process Hardening List of content 5 index text/html 2017-05-06T15:24:06+00:00 Anonymous (anonymous@undisclosed.example.com) https://secscan.acron.pl/centos7/1/6?rev=1494077046&do=diff 1.6 Mandatory Access Control List of content 6 index Description Mandatory Access Control (MAC) provides an additional layer of access restrictions to processes on top of the base Discretionary Access Controls. By restricting how processes can access files and resources on a system the potential impact from vulnerabilities in the processes can be reduced. text/html 2017-05-06T15:23:34+00:00 Anonymous (anonymous@undisclosed.example.com) https://secscan.acron.pl/centos7/1/7?rev=1494077014&do=diff 1.7 Warning Banners List of content 7 index Description Presenting a warning message prior to the normal user login may assist in the prosecution of trespassers on the computer system. Changing some of these login banners also has the side effect of hiding text/html 2017-05-06T03:44:56+00:00 Anonymous (anonymous@undisclosed.example.com) https://secscan.acron.pl/centos7/1/8?rev=1494035096&do=diff 1.8 Ensure updates, patches, and additional security software are installed (Not Scored) Description Periodically patches are released for included software either due to security flaws or to include additional functionality. Rationale Newer patches may contain security enhancements that would not be available through the latest full update. As a result, it is recommended that the latest software patches be used to take advantage of the latest functionality. As with any software installation…