Enhancing Security on Rocky Linux with CEM for Linux v1.8.0

As a system administrator, ensuring the security of your Rocky Linux system is crucial to prevent potential malicious activity and reduce manual overhead associated with solution configuration. One effective way to achieve this is by implementing the CIS (Center for Internet Security) Benchmark controls. In this article, we will explore how CEM for Linux v1.8.0 enables you to enforce CIS Rocky Linux 8 Benchmarks, Levels 1 and 2.

Auditing and Process Control

The first set of controls focuses on auditing and process control. Control 4.1.1.3 ensures that processes are audited even if they are running before the auditd service is started. This control helps detect potential malicious activity by recording events in the system's audit log. Additionally, Control 1.6.1.2 ensures that Security-Enhanced Linux (SELinux) is enabled at boot time and cannot be overridden by grub boot parameters. This restriction prevents unauthorized users from viewing and changing boot parameters.

Grub Configuration File Permissions

Another critical control is Control 1.4.2, which specifies permissions for the grub configuration file. This file contains information about boot settings and passwords for unlocking boot options. By setting specific permissions, this control helps prevent unauthorized users from undermining system security.

Bootloader Password and Inactive Accounts

To further enhance security, Control 1.4.1 ensures that a bootloader password is set. This adds an extra layer of protection against unauthorized access to the system. Moreover, Control 5.6.1.4 helps ensure that inactive user accounts are locked automatically within 30 days of password expiration, reducing the risk of vulnerabilities posed by inactive accounts.

Preventing Unencrypted Protocols and Remote Shell Clients

The CEM for Linux v1.8.0 also includes controls to prevent the use of unencrypted protocols and remote shell clients. Control 2.3.3 helps ensure that the Linux talk client is not installed, while Control 2.3.2 prevents the installation of remote shell (rsh) clients. These controls reduce the risk of exposing user credentials and compromising system security.

By implementing the CIS Rocky Linux 8 Benchmarks using CEM for Linux v1.8.0, you can significantly enhance the security of your system while reducing manual overhead associated with solution configuration. With these controls in place, you can detect potential malicious activity, prevent unauthorized access, and ensure that your system is configured securely from the start.

Cis benchmark linux commands