McAfee Policy Auditor Content Update Summary. New Checks

Transcription

1 2017-Oct-12 McAfee Policy Auditor Content Update Summary Product / Version Content Version McAfee Policy Auditor 6.x 1224 New Checks Oval ID oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: Security Update for Microsoft Office 2016 (KB ) Security Update for Microsoft Office 2010 SP2 (KB ) Security Update for Microsoft Office 2013 SP1 (KB ) Security Update for Skype for Business 2015 (KB ) Security Update for Microsoft Office SharePoint Foundation 2013 SP1 (KB ) Security Update for Microsoft Office SharePoint Server 2013 SP1 (KB ) Security Update for Microsoft Office SharePoint Server 2013 SP1 (KB ) Security Update for Microsoft Skype for Business 2016 (KB ) Security Update for Microsoft Office Outlook 2010 SP2 (KB ) Security Update for Microsoft Office Outlook 2013 SP1 (KB ) Security Update for Microsoft Office Word Viewer 2003 (KB ) Security Update for Microsoft Office SharePoint Server 2016 (KB ) Security Update for Microsoft Office Word 2010 SP2 (KB ) Security Update for Microsoft Office Word 2007 SP3 (KB ) Security Update for Microsoft Office Sharepoint Server 2010 SP2 Word Automation Services (KB ) Security Update for Microsoft Office Compatibility Pack SP3 (KB ) Security Update for Microsoft Office Word 2016 (KB ) Security Update for Microsoft Office Word 2013 SP1 (KB ) Security Update for Microsoft Office Sharepoint Server 2013 SP1 Word Automation Services (KB ) Security Update for Microsoft Office Outlook 2016 (KB ) Security Update for Microsoft Office Web Apps 2010 SP2 (KB ) Security Update for Microsoft Office Web Apps Server 2013 SP1 (KB ) Security Update for Microsoft Office Online Server (KB )

2 oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: Security Update for Microsoft Office 2016 (KB ) Security Update for Microsoft Office 2013 SP1 (KB ) Security Update for Microsoft Office 2010 SP2 (KB ) Disable Avahi Server - Remove zeroconf in Debian OS Update - Use the Latest OS Release for Debian Test the permissions of the file - /etc/apache2/apache2.conf Test the group owner of the file - /etc/apache2/apache2.conf Test the owner of the file - /etc/apache2/apache2.conf Test the permissions set on the file - /etc/bind/named.conf Test the group owner of the file - /etc/bind/named.conf Test the owner of the file - /etc/bind/named.conf FTP Configuration - umask for ftp users Configure SELinux - SELinux should not be disabled in /boot/grub/grub.cfg The Squid3 EUID should be set to an appropriate user The Squid3 GUID should be set to an appropriate group Configuration - restrict lockd service to use a static udp port in /etc/default/nfs-kernel-server file Configuration - restrict lockd service to use a static tcp port in /etc/default/nfs-kernel-server file net-snmp version on the system FTP Configuration - Enable or disable anonymous access via vsftpd service as appropriate Test the permissions of the directory - /etc/apache2/conf.d Test the group owner of the directory - /etc/apache2/conf.d Test the owner of the directory - /etc/apache2/conf.d Test the permissions of the directory - /etc/apache2/conf-available Test the group owner of the directory - /etc/apache2/conf-available Test the owner of the directory - /etc/apache2/conf-available Test the permissions of all files present in the directory - /etc/apache2/* files Test the owner of all files present in the directory - /etc/apache2/* files Test the group owner of all files present in the directory - /etc/apache2/* files Test the permissions of the file - /usr/sbin/apache2 Test the owner of the file - /usr/sbin/apache2 Test the group owner of the file - /usr/sbin/apache2 Ensure password hashing algorithm is set to SHA-512

3 oval:com.mcafee.oval:def: Set Password Creation Requirement Parameters Using pam_pwquality - retry oval:com.mcafee.oval:def: Set Password Creation Requirement Parameters Using pam_pwquality - try_first_pass oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: Set Lockout for Failed Password Attempts - pam_faillock Service - gdm - running state Service - nis - running state Service - nfs-common - running state Service - bluetooth - running state Service - cpufrequtils - running state Service - smartd - running state Service - pcscd - running state Service - microcode - running state Service - mdadm - running state Service - kdump-tools - running state Service - irqbalance - running state Service - systemd-firstboot - running state Service - restorecond - running state Service - mysql - running state Service - quotarpc - running state Service - ntp - running state Inetd based service - rstatd - running state Inetd based service - rusersd - running state Service - krb5-kdc - running state Service - krb5-admin-server - running state The specified package version should be installed. FTP Configuration - Enable or disable file uploads via vsftpd service as appropriate oval:com.mcafee.oval:def: The operating system installed on the system is macos oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: Apple macos Update Apple macos High Sierra Supplemental Update October 2017 Security Monthly Quality Rollup for Windows Server 2008 R2 for x64-based Systems (KB ) October 2017 Security Monthly Quality Rollup for Windows 7 (KB ) October 2017 Security Monthly Quality Rollup for Windows 7 for x64-based Systems (KB )

4 oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: October 2017 Security Only Update for Windows Server 2008 R2 for x64-based Systems (KB ) October 2017 Security Only Update for Windows 7 for x64-based Systems (KB ) October 2017 Security Only Update for Windows 7 (KB ) October 2017 Cumulative Update for Windows 10 (KB ) October 2017 Cumulative Update for Windows 10 for x64-based Systems (KB ) October 2017 Cumulative Update for Windows 10 Version 1511 (KB ) October 2017 Cumulative Update for Windows 10 Version 1511 for x64-based Systems (KB ) October 2017 Cumulative Update for Windows 10 Version 1703 (KB ) October 2017 Cumulative Update for Windows 10 Version 1703 for x64-based Systems (KB ) October 2017 Security Monthly Quality Rollup for Windows 8.1 for x64-based Systems (KB ) October 2017 Security Monthly Quality Rollup for Windows 8.1 (KB ) October 2017 Security Monthly Quality Rollup for Windows Server 2012 R2 (KB ) October 2017 Security Only Update for Windows Server 2012 R2 (KB ) October 2017 Security Only Update for Windows 8.1 for x64-based Systems (KB ) October 2017 Security Only Update for Windows 8.1 (KB ) (KB ) October 2017 Security Update for Windows Server 2008 (KB ) (KB ) October 2017 Security Update for Windows Server 2008 (KB ) October 2017 Security Update for Windows Server 2008 (KB ) (KB ) oval:com.mcafee.oval:def: October 2017 Security Monthly Quality Rollup for Windows Server 2012 (KB ) oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: October 2017 Security Only Update for Windows Server 2012 (KB ) October 2017 Cumulative Update for Windows Server 2016 for x64-based Systems (KB ) October 2017 Cumulative Update for Windows 10 Version 1607 for x64-based Systems (KB ) October 2017 Cumulative Update for Windows 10 Version 1607 (KB )

5 oval:com.mcafee.oval:def: October 2017 Cumulative Security Update for Internet Explorer 11 for Windows 8.1 for x64-based Systems (KB ) oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: October 2017 Cumulative Security Update for Internet Explorer 11 for Windows Server 2008 R2 for x64-based Systems (KB ) October 2017 Cumulative Security Update for Internet Explorer 11 for Windows Server 2012 R2 (KB ) October 2017 Cumulative Security Update for Internet Explorer 9 for Windows Server 2008 (KB ) October 2017 Cumulative Security Update for Internet Explorer 9 for Windows Server 2008 for x64-based Systems (KB ) October 2017 Cumulative Security Update for Internet Explorer 10 for Windows Server 2012 (KB ) oval:com.mcafee.oval:def: October 2017 Cumulative Security Update for Internet Explorer 11 for Windows 7 (KB ) oval:com.mcafee.oval:def: October 2017 Cumulative Security Update for Internet Explorer 11 for Windows 7 for x64-based Systems (KB ) oval:com.mcafee.oval:def: October 2017 Cumulative Security Update for Internet Explorer 11 for Windows 8.1 (KB ) oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: (KB ) October 2017 Security Update for Windows Server 2008 (KB ) October 2017 Security Update for Windows Server 2008 (KB ) (KB ) October 2017 Security Update for Windows Server 2008 (KB ) October 2017 Security Update for Windows Server 2008 x64 Edition (KB ) (KB ) October 2017 Security Update for Windows Server 2008 (KB ) (KB ) October 2017 Security Update for Windows Server 2008 (KB ) October 2017 Security Update for Windows Server 2008 (KB ) (KB ) (KB ) October 2017 Security Update for Windows Server 2008 (KB ) Updated Checks

6 oval:com.mcafee.primitives:def: oval:com.mcafee.primitives:def: oval:com.mcafee.primitives:def: oval:com.mcafee.primitives:def: oval:com.mcafee.primitives:def: oval:com.mcafee.primitives:def: oval:com.mcafee.primitives:def: oval:com.mcafee.primitives:def: oval:com.mcafee.primitives:def: oval:com.mcafee.oval:def:7712 oval:com.mcafee.oval:def:7708 oval:com.mcafee.oval:def:7610 oval:com.mcafee.oval:def:7606 oval:com.mcafee.oval:def:7343 oval:com.mcafee.oval:def:7339 oval:com.mcafee.oval:def:7241 oval:com.mcafee.oval:def:7026 oval:com.mcafee.oval:def:6986 oval:com.mcafee.oval:def:6910 oval:com.mcafee.oval:def:6870 oval:com.mcafee.oval:def:7768 oval:com.mcafee.oval:def:7252 oval:com.mcafee.oval:def:8853 oval:com.mcafee.oval:def:8873 oval:com.mcafee.oval:def:8865 oval:com.mcafee.oval:def:8875 oval:com.mcafee.oval:def:8856 oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: Unix inetd Check Unix Check system configuration file where the setting is a string Unix Check system configuration file where the setting is a integer Check the content of an XML file for known values Check the file permissions of a file Unix Directory Check Compare the owner of a file to a known value Check the cryptographic hash of a file against a known file hash Check the state of an environment variable Test the permissions of the file - /etc/xinetd.conf Test the owner of the file - /etc/xinetd.conf Test the owner of the file - /usr/bin/smbpasswd Test the group owner of the file - /usr/bin/smbpasswd Test the owner of the file - /etc/exports Test the permissions of - smbpasswd Test the owner of the file - /etc/aliases Limit root login to the local console. Test the group owner of the file - /etc/bashrc Test the permissions of the file - /etc/gshadow Test the permissions of the file - /etc/anacrontab Service - avahi-daemon - running state Test the owner of the file - /etc/at.deny xinetd based service - echo - running state xinetd based service - echo-udp - running state xinetd based service - daytime - running state xinetd based service - daytime-udp - running state xinetd based service - chargen - running state Test the owner of the file - /etc/gshadow Test the group ower of the file - /etc/gshadow Test the owner of the file - /etc/anacrontab Test the group owner of the file - /etc/anacrontab Test the enable / disable status for - Restriction of NFS clients to privileged ports Login prompts on serial ports should be enabled. The dynamic DNS feature of the DHCP server should be disabled Service - crond - running state

7 oval:com.mcafee.oval:def: oval:com.mcafee.oval:def:8624 oval:com.mcafee.oval:def:8652 oval:com.mcafee.oval:def:8612 oval:com.mcafee.oval:def:8608 oval:com.mcafee.oval:def:8628 oval:com.mcafee.oval:def:8640 oval:com.mcafee.oval:def:8632 oval:com.mcafee.oval:def:8648 oval:com.mcafee.oval:def:8616 oval:com.mcafee.oval:def:8620 oval:com.mcafee.oval:def:8604 oval:com.mcafee.oval:def:8644 oval:com.mcafee.oval:def:99513 oval:com.mcafee.oval:def:78729 oval:com.mcafee.oval:def:78774 oval:com.mcafee.oval:def:50279 oval:com.mcafee.oval:def:50461 oval:com.mcafee.primitives:def:50971 oval:com.mcafee.primitives:def:50965 oval:com.mcafee.primitives:def:50967 oval:com.mcafee.primitives:def:50968 oval:com.mcafee.primitives:def:51101 oval:com.mcafee.oval:def:54360 oval:com.mcafee.primitives:def:73244 oval:com.mcafee.primitives:def:75844 oval:com.mcafee.oval:def:99519 oval:com.mcafee.oval:def:78771 oval:com.mcafee.oval:def:78887 oval:com.mcafee.oval:def:78808 oval:com.mcafee.oval:def:99517 oval:com.mcafee.oval:def:78693 oval:com.mcafee.oval:def:79087 oval:com.mcafee.oval:def:79088 Service - anacron - running state The shell for the webservd account should be assigned appropriately. The shell for the uucp account should be assigned appropriately. The shell for the smmsp account should be assigned appropriately. The shell for the nuucp account should be assigned appropriately. The shell for the nobody account should be assigned appropriately. The shell for the nobody4 account should be assigned appropriately. The shell for the noaccess account should be assigned appropriately. The shell for the lp account should be assigned appropriately. The shell for the listen account should be assigned appropriately. The shell for the gdm account should be assigned appropriately. The shell for the bin account should be assigned appropriately. The shell for the adm account should be assigned appropriately. Test the owner of the file - /etc/resolv.conf Test the permissions of the file - /etc/services Test the group owner of the file - /etc/aliases The operating system installed on the system is Mac OS X Service - network - running state Mac OS X check for a daemon listening on the target host Test password compliance Mac OS X nvram data Mac OS X Account Check Text File Content Check Password history should be set to an appropriate value Unix File Check Unix File Existence Check Test the permissions set on the file - /etc/resolv.conf Test the permissions of the directory - /tmp Test the owner of the file - /etc/services Test the group owner of the file - /etc/services Test the group owner of the file - /etc/resolv.conf Test the permissions of the file - /etc/aliases Test the group owner of the file - /etc/audit/audit.rules Test the owner of the file - /etc/audit/audit.rules

8 oval:com.mcafee.oval:def:79729 oval:com.mcafee.oval:def:79080 oval:com.mcafee.oval:def:79023 oval:com.mcafee.oval:def:79089 oval:com.mcafee.oval:def:78703 oval:com.mcafee.oval:def:78695 oval:com.mcafee.oval:def:79079 oval:com.mcafee.oval:def:92617 oval:com.mcafee.oval:def:92742 oval:com.mcafee.oval:def:79091 oval:com.mcafee.oval:def:79078 oval:com.mcafee.oval:def:78782 oval:com.mcafee.oval:def:78696 oval:com.mcafee.oval:def:79092 oval:com.mcafee.oval:def:79002 oval:com.mcafee.oval:def:79090 oval:com.mcafee.oval:def:79024 oval:com.mcafee.oval:def:79025 oval:com.mcafee.oval:def:78837 oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.primitives:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: Test the group owner of the file - /etc/at.deny Test the permissions of the file - /etc/security/access.conf Test the group owner of the file - /usr/sbin/userhelper Test the permissions of the file - /etc/audit/audit.rules Test the permissions of the file - /etc/exports Test the permissions of the file - /etc/bashrc Test the owner of the file - /etc/security/access.conf Test the owner of the directory - /var/log Test the permissions of the file - /var/run/utmp Test the owner of the directory - /root Test the group owner of the file - /etc/security/access.conf Test the group owner of the file - /etc/exports Test the permissions of the file - /etc/at.deny Test the permissions of the directory - /root Test the owner of the File - /etc/bashrc Test the group owner of the directory - /root Test the owner of the file - /usr/sbin/userhelper Test the permissions of the file - /usr/sbin/userhelper Test the group owner of the file - /etc/xinetd.conf Test the permissions of the directory - /etc/security Set mesg n as default for all users in /etc/profile configuration - sendmail vrfy command should be disabled configuration - sendmail expn command should be disabled Test the configuration status for - SELinux policy Configure SELinux - SELinux - enforcing should not be disabled in /boot/grub/grub.conf Test the configuration status for - SELinux state Test the status of - SSH MaxAuthTries xinetd based service - tcpmux-server - running state Text File Content54 Check Test the owner of the file - /var/log/syslog Test the group owner of the file - /var/log/syslog Test the permissions of the file - /var/log/syslog Test the permissions of the file - /var/log/daemon.log

9 oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: Test the group owner of the file - /var/log/kern.log Test the owner of the file - /var/log/unused.log Test the group owner of the file - /var/log/unused.log Test the group owner of the file - /var/log/daemon.log Test the owner of the file - /var/log/daemon.log Test the permissions of the file - /var/log/kern.log Test the owner of the file - /var/log/kern.log Test the permissions of the file - /var/log/unused.log xinetd based service - discard-udp - running state Set Password Creation Requirement Parameters Using pam_pwquality - dcredit Set Password Creation Requirement Parameters Using pam_pwquality - ocredit Set Password Creation Requirement Parameters Using pam_pwquality - minlen Set Password Creation Requirement Parameters Using pam_pwquality - lcredit Set Password Creation Requirement Parameters Using pam_pwquality - ucredit oval:com.mcafee.oval:def: Patches for ELSA for Oracle Linux 7 oval:com.mcafee.oval:def: Patches for ELSA for Oracle Linux 7 oval:com.mcafee.oval:def: Patches for ELSA for Oracle Linux 7 oval:com.mcafee.oval:def: Patches for ELSA for Oracle Linux 7 oval:com.mcafee.oval:def: Patches for ELSA for Oracle Linux 7 oval:com.mcafee.oval:def: Patches for ELSA for Oracle Linux 7 oval:com.mcafee.oval:def: Check That Reserved UIDs Are Assigned to System Accounts oval:com.mcafee.oval:def: Patches for ELSA for Oracle Linux 7 oval:com.mcafee.oval:def: Patches for ELSA for Oracle Linux 7 oval:com.mcafee.oval:def: Patches for ELSA for Oracle Linux 7 oval:com.mcafee.oval:def: Patches for ELSA for Oracle Linux 7 oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: xinetd based service - discard tcp - running state Test the permissions set on the file - /etc/hosts Test the permissions of the file - any defined script file Verify if root user is assigned home directory Use Root-Squashing on All Exports oval:com.mcafee.oval:def: Patches for ELSA for Oracle Linux 7 oval:com.mcafee.oval:def: Patches for ELSA for Oracle Linux 7 oval:com.mcafee.oval:def: Patches for ELSA for Oracle Linux 7 oval:com.mcafee.oval:def: Patches for ELSA for Oracle Linux 7

10 oval:com.mcafee.oval:def: Patches for ELSA for Oracle Linux 7 oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: The Squid GUID should be set to an appropriate group Test the permissions of the file - /etc/snmp/snmpd.conf Test the owner of the file - /etc/skel/.bash_profile Test the group owner of the directory - /var/www/html Test the permissions of the file - /bin/bash NFS Configuration - insecure_locks option removal - /etc/exports Write access to NFS shares should be disabled Test the owner of the file - /etc/skel/.bashrc Test the group owner of the file - /etc/cron.deny Test the permissions of the files - /var/spool/mail/* Test the group owner of the file - /usr/bin/at Test the permissions of the file - /usr/bin/traceroute Test the owner of the files - /var/lib/ldap/.* Test the group owner of the file - /usr/bin/traceroute Test the group owner of the file - /var/log/audit/audit.log Test the permissions of the file - /etc/auto.net Test the permissions set on the file - /etc/skel/.bash_logout Test the permissions of the file - /etc/auto.master Disable USB storage devices Test the owner of the directory - /etc/profile.d Test the permissions of the file - /etc/netconfig Test the owner of the file - /etc/samba/smb.conf Test the owner of the file - /usr/bin/traceroute Test the group owner of the file - /etc/snmp/snmpd.conf Test the permissions of the directory - /var/www/html Test the group owner of the files - /etc/default/.* Test the permissions set on the file - /etc/skel/.bashrc Test the owner of the file - /usr/bin/htpasswd Test the permissions of the directory - /var/tmp Test the owner of the file - /etc/cron.deny Test the owner of the file - /etc/snmp/snmpd.conf Test the owner of the directory - /var Test the permissions of the file - /usr/bin/htpasswd

11 oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: Test the owner of the file - /etc/auto.misc Test the owner of the file - /var/log/audit/audit.log Test the group owner of the file - /etc/skel/.bashrc Test the permissions of the file - /sbin/sendmail.sendmail configuration - root account should be disabled Test the group owner of the file - /etc/auto.net Test the permissions of the file - /bin/tcsh Configure the read-only option for all NFS exports Test the owner of the file - /usr/bin/at Test the owner of the directory - /var/www/html Test the permissions set on the file - /etc/audit/auditd.conf Test the group owner of the file - /etc/audit/auditd.conf Test the permissions of the file - /usr/bin/at Test the owner of the file - /etc/auto.master Test the group owner of the file - /etc/auto.master Test the permissions set on the file - /etc/skel/.bash_profile Test the permissions of the file - /usr/bin/bash Test the group owner of the directory - /var Test the owner of the file - /etc/auto.net Test the existence of the file - /etc/hosts.equiv Test the configuration status of Mail Transfer Agent (MTA) for local-only mode Test if the file - /var/run/btmp exists Password Setting - require new users to change their password on first logon Test the permissions of the file - /dev/mem Test the group owner of the directory - /etc/profile.d Test if the file - /var/run/utmp exists Test the owner of the file - /etc/skel/.bash_logout Test the group owner of the file - /etc/samba/smb.conf Test the permissions of the files - /var/lib/ldap/.* Test the permissions of the file - /var/log/audit/audit.log Test the group owner of the file - /etc/auto.misc Test the permissions on user.forward files Test the group owner of the file - /etc/skel/.bash_profile Test the owner of the file - /etc/audit/auditd.conf

12 oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: Test the owner of the files - /etc/default/.* Test the permissions of the files - /etc/default/.* Test the group owner of the files - /var/lib/ldap/.* The Squid EUID should be set to an appropriate user Test the permissions of the directory - /var Test the permissions of the directory - /var/adm Test the permissions of the file - /usr/bin/sync Test the group owner of the directory - /var/adm Test the permissions of the file - /etc/auto.misc Test if the system logon banner is set correctly - /etc/dconf/db/gdm.d/ Test the permissions of the file - /etc/rsyslog.conf Test if the files - /var/log/boot.log* exists Test the permissions of the directory - /etc/profile.d Test the group owner of the file - /etc/skel/.bash_logout Test the permissions of the files - /var/tmp/* Test the owner of the directory - /var/adm Test the group owner of the file - /usr/bin/htpasswd Test the permissions of the file - /etc/cron.deny Test the permissions of the file - /dev/null oval:com.mcafee.oval:def: Patches for CESA for CentOS 6 oval:com.mcafee.oval:def: Service - isc-dhcp-server - running state oval:com.mcafee.oval.auto:def: Patches for ELSA for Oracle Linux 7 oval:com.mcafee.oval.auto:def: Patches for ELSA for Oracle Linux 7 oval:com.mcafee.oval.auto:def: Patches for ELSA for Oracle Linux 7 oval:com.mcafee.oval.auto:def: Patches for ELSA for Oracle Linux 7 oval:com.mcafee.oval.auto:def: Patches for ELSA for Oracle Linux 7 oval:com.mcafee.oval.auto:def: Patches for ELSA for Oracle Linux 7 oval:com.mcafee.oval.auto:def: Patches for ELSA for Oracle Linux 7 oval:com.mcafee.oval.auto:def: Patches for CESA for CentOS 6 oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: Cumulative Update for Windows 10 Version 1607 (KB ) Cumulative Update for Windows 10 Version 1607 for x64-based Systems (KB ) Cumulative Update for Windows 10 Version 1607 (KB ) Cumulative Update for Windows 10 Version 1607 for x64-based Systems (KB )

13 oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: August 2017 Security Update for Windows Server 2008 for x64-based Systems (KB ) August 2017 Cumulative Update for Windows 10 Version 1607 (KB ) August 2017 Security Update for Windows Server 2008 (KB ) August 2017 Cumulative Update for Windows 10 Version 1607 for x64-based Systems (KB ) August 2017 Security update for Microsoft SQL Server 2014 SP1 (KB ) oval:com.mcafee.oval.auto:def: Patches for ELSA for Oracle Linux 6 oval:com.mcafee.oval.auto:def: Patches for ELSA for Oracle Linux 7 oval:com.mcafee.oval.auto:def: Patches for CESA for CentOS 6 oval:com.mcafee.oval.auto:def: Patches for CESA for CentOS 6 oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: September 2017 Cumulative Update for Windows 10 Version 1607 for x64-based Systems (KB ) September 2017 Cumulative Update for Windows 10 Version 1607 (KB ) Apple itunes Security Update 12.7 for Mac OS X Apple Safari Security Update 11.0 for Mac OS X New Benchmarks Benchmark ID DebianLinuxPCIBenchmark Debian Linux PCI Benchmark Updated Benchmarks Benchmark ID AppleMacOSXPatchPolicy WindowsEUGDPRBenchmark WindowsServer Apple Mac OSX Patch Policy Windows EU General Data Protection Regulation Benchmark Windows Server NIST Benchmark MicrosoftOfficePatchPolicy_2013 Microsoft Office Patch Policy for 2013 MicrosoftOfficePatchPolicy_2016 Microsoft Office Patch Policy for 2016 MicrosoftOfficePatchPolicy_2007 Microsoft Office Patch Policy for 2007 MicrosoftOfficePatchPolicy_2010 Microsoft Office Patch Policy for 2010 MicrosoftOfficePatchPolicy_2003 Microsoft Office Patch Policy for 2003 MS_Windows_Bulletin_Benchmark_2017_ MS Windows Bulletin Benchmark 2017 LatestPatchPolicyBenchmark Latest Patch Policy Benchmark McAfee Technical Support

14 PrimeSupport ServicePortal: This message may contain confidential and privileged material for the sole use of the intended recipient. Any review or distribution by others is strictly prohibited. If you are not the intended recipient please contact the sender and delete all copies. Copyright 2017 McAfee, LLC McAfee and the McAfee logo, McAfee Active Protection, epolicy Orchestrator, McAfee epo, Foundstone, McAfee LiveSafe, McAfee QuickClean, McAfee SECURE, SecureOS, McAfee Shredder, SiteAdvisor, McAfee Stinger, TrustedSource, VirusScan are trademarks of McAfee LLC or its subsidiaries in the US and other countries. Other marks and brands may be claimed as the property of others.