CIS Level 1 Guidelines

For more details about Center for Internet Security (CIS) please refer to this document

Instruction steps

I. Install OpenSCAP

bash
Copy

II. Generate a result file and a HTML report using OpenSCAP scanner tool

Bash
Copy

III. Remediation of CIS Level 1 issues

Generate a remediation script based on the ssg-rhel9-ds.xml file:

Bash
Copy

And execute remediation script.

Bash
Copy

IV. Review the results after remediation

Bash
Copy

Example:

Notes

  • CIS Level 1 requires /tmp folder to be mounted in a separate partition. Please ensure that that new partition have enough disk space for MetaDefender Core to run.
  • CIS Level 1 requires that "Ensure No World-Writable Files Exist".
    • For now, when freshly installing MetaDefender Core, all its binary files meet the requirement.
    • When installing/updating engines, some engines might create additional files for its operation, and it might violate this requirement. In this case, you need to again execute the remediation script in the step III.
Type to search, ESC to discard
Type to search, ESC to discard
Type to search, ESC to discard
Next to read:
Wizard Setup
On This Page
CIS Level 1 GuidelinesInstruction stepsI. Install OpenSCAPII. Generate a result file and a HTML report using OpenSCAP scanner toolIII. Remediation of CIS Level 1 issuesIV. Review the results after remediationNotes