AI Checklist Generator

From the makers of Manifestly Checklists

Email address

Home > Information Technology > CIS Benchmark Level 2 checklist for CentOS7

CIS Benchmark Level 2 checklist for CentOS7

General System Settings

Ensure that the latest security patches are installed.

Ensure package manager is configured to use a trusted repository.

Ensure that administrative accounts are restricted.

Here are some additional steps that could be included in the General System Settings section of a CIS Benchmark Level 2 checklist for CentOS 7

Ensure the system's time is synchronized with a reliable time source (NTP)

Ensure that unnecessary services are disabled or removed

Ensure that the system is using a supported version of CentOS with ongoing updates

Ensure that the firewall is configured and active

Ensure that user account expiration policies are in place

Ensure that the root account is properly secured and that root login is disabled for SSH

Ensure that SSH is configured to use strong encryption algorithms and protocols

Ensure that secure file permissions are applied to sensitive files (e.g., `/etc/passwd`, `/etc/shadow`)

Ensure that automated security scans are scheduled regularly

Ensure that system logs are rotated and retained according to organizational policy

Ensure that the SELinux status is set to 'enforcing' mode

Ensure that security modules (like AIDE or Tripwire) are installed for file integrity monitoring

Ensure that the system's hostname is set and resolves correctly

Ensure that the system is configured for proper resource limits (e.g., using `ulimit`)

Ensure that any unused network protocols are disabled

These steps help enhance the overall security posture of the CentOS 7 system and align with best practices outlined in CIS benchmarks

Account and Authentication Settings

Ensure only necessary accounts are present.

Ensure password complexity requirements are configured.

Ensure password expiration is set to a maximum of 90 days.

Ensure account lockout is enabled after a specified number of failed login attempts.

Access Control Settings

Ensure that the default umask is set to 027 or more secure.

Ensure that the root account is not accessible via SSH.

Ensure that unnecessary services are disabled.

Logging and Auditing Settings

Ensure that system logging is enabled and configured.

Ensure that rsyslog is configured to log to a remote server.

Ensure that auditd is installed and running.

Firewall and Network Settings

Ensure that a firewall is enabled and configured.

Ensure that only necessary ports are open.

Ensure that IP forwarding is disabled unless required.

Service and Daemon Settings

Ensure that unnecessary services are disabled or removed.

Ensure that services are configured to start on boot only when necessary.

Ensure that services are regularly updated.

File and Directory Permissions

Ensure that sensitive files and directories have correct permissions.

Ensure that the /etc/passwd, /etc/shadow, /etc/group, and /etc/gshadow files have appropriate permissions.

Ensure that SUID and SGID files are monitored.

Security Enhancements

Ensure SELinux is enabled and enforcing.

Ensure that unnecessary kernel modules are disabled.

Ensure that system integrity checking tools are installed and configured.

Backup and Recovery

Ensure that backups are performed regularly and stored securely.

Ensure that backup procedures are documented and tested.

Review and Maintenance

Ensure that security configurations are reviewed regularly.

Ensure that any deviations from the established security baseline are documented.

This checklist covers multiple areas essential for ensuring the security and compliance of CentOS 7 systems according to the CIS Benchmark Level 2 standards.

Download CSV Download JSON Download Markdown

Use in Manifestly

Related Checklists

Security Checklist

Security Checklist is an important tool to identify, assess and manage security risks in order to protect information systems and data.

view →

Server Maintenance Checklist

A server maintenance checklist is an important tool for ensuring the stability and reliability of a server system.

view →

Desktop Configuration Checklist

A Desktop Configuration Checklist is a valuable tool for ensuring that systems are configured securely and consistently.

view →

Incident Response Checklist

An Incident Response Checklist is essential for ensuring a timely, effective, and organized response to security incidents.

view →

Data Backup Checklist

A Data Backup Checklist is an important tool for ensuring that important data is regularly backed up and secure.

view →

Software Update Checklist

A Software Update Checklist is essential to ensure that all of your software is up-to-date and running optimally.

view →

Server Configuration Checklist

The Server Configuration Checklist is an important tool for ensuring that a server is properly set up and secured for the intended purpose.

view →

Performance Monitoring Checklist

Performance Monitoring Checklist is a tool used to ensure a system is running efficiently and effectively, and to identify and address any potential problems or issues.

view →

Network Maintenance Checklist

Network Maintenance Checklists provide a structured way to ensure that all critical network components are regularly monitored and maintained, helping to ensure the network's stability and security.

view →

Patch Management Checklist

Patch Management Checklist is important for IT departments to ensure that all systems are up-to-date and secure from potential security threats.

view →

Disaster Recovery Checklist

A Disaster Recovery Checklist is an important tool for organizations to use to ensure that all necessary steps are taken to protect and maintain their IT systems in the event of an emergency.

view →

Software Installation Checklist

A software installation checklist helps ensure that all required components are installed correctly and efficiently, minimizing the risk of errors and providing a consistent and seamless user experience.

view →

User Access Control Checklist

User Access Control Checklists are important for ensuring that only authorized users have access to sensitive information and systems.

view →

Hey there! Here's a little about us or visit our recurring workflow SaaS: Manifestly Checklists

Light Dark