CCE-5847-9

2009-07-30T19:30:09.577Z

/export/home should be configured on an appropriate filesystem logical volume

CCE-5424-7

2009-07-30T19:30:09.687Z

/var should be configured on an appropriate filesystem logical volume

CCE-5710-9

2009-07-30T19:30:09.703Z

/opt should be configured on an appropriate filesystem logical volume

CCE-5662-2

2009-07-30T19:30:09.733Z

The shell for the root account should be located on the appropriate filesystem

CCE-5317-3

2009-07-30T19:30:09.750Z

Core dump size limits should be set appropriately

CCE-5384-3

2009-07-30T19:30:09.750Z

The read-only SNMP community string should be set appropriately.

CCE-5723-2

2009-07-30T19:30:09.797Z

The read/write SNMP community string should be set appropriately.

CCE-5634-1

2009-07-30T19:30:09.797Z

Password policy should ban or allow usernames or UIDs in passwords as appropriate

CCE-5352-0

2009-07-30T19:30:09.797Z

Password policy should ban or allow words found in a dictionary as appropriate.

CCE-5848-7

2009-07-30T19:30:09.827Z

Password policy should enforce the correct amount of special characters

CCE-5443-7

2009-07-30T19:30:09.860Z

Password policy should enforce or not enforce the requirement to have mixed case passwords as appropriate.

CCE-5664-8

2009-07-30T19:30:09.877Z

The minimum password age should be set as appropriate

CCE-5804-0

2009-07-30T19:30:09.877Z

The minimum required password length should be set as appropriate

CCE-4858-7

2009-07-30T19:30:09.907Z

Password history should be saved for an appropriate number of password changes

CCE-5775-2

2009-07-30T19:30:09.907Z

The number of consecutive failed login attempts required to trigger a lockout should be set as appropriate

CCE-5761-2

2009-07-30T19:30:09.920Z

CCE-5841-2

2009-07-30T19:30:09.953Z

New users should be required or not required to change their password on first login as appropriate

CCE-5858-6

2009-07-30T19:30:09.967Z

Access to single-user mode (maintainence mode) should require the root password or not as appropriate

CCE-5078-1

2009-07-30T19:30:09.983Z

The delay between failed logins should be set as appropriate

CCE-5715-8

2009-07-30T19:30:09.983Z

All files should be owned by an existing account or not as appropriate.

CCE-5684-6

2009-07-30T19:30:10.017Z

All files should be owned by an existing group or not as appropriate.

CCE-5244-9

2009-07-30T19:30:10.017Z

The console login banner should be set appropriately.

CCE-5402-3

2009-07-30T19:30:10.017Z

The SSH login banner should be set appropriately.

CCE-5622-6

2009-07-30T19:30:10.047Z

The telnet login banner should be set appropriately.

CCE-5843-8

2009-07-30T19:30:10.077Z

The ftp login banner should be set appropriately.

CCE-5842-0

2009-07-30T19:30:10.093Z

The graphical login banner should be set appropriately.

CCE-5560-8

2009-07-30T19:30:10.093Z

Accounts other than root should be allowed to have the UID 0 or not as appropriate

CCE-4873-6

2009-07-30T19:30:10.127Z

Accounts other than root and locked system accounts should be allowed to have a GID of 0 or not as appropriate

CCE-5187-0

2009-07-30T19:30:10.140Z

Each account should be assigned a unique UID or not as appropriate

CCE-5765-3

2009-07-30T19:30:10.140Z

The ftp account should exist or not as appropriate

CCE-4884-3

2009-07-30T19:30:10.170Z

CCE-5381-9

2009-07-30T19:30:10.187Z

The screen lock should activate after an appropriate period of inactivity

CCE-5645-7

2009-07-30T19:30:10.203Z

File permissions should be set appropriately for all shell executables.

CCE-5597-0

2009-07-30T19:30:10.217Z

Remote (serial) consoles should be enabled or disabled as appropriate.

CCE-5676-2

2009-07-30T19:30:10.250Z

Root logins should be restricted to the console or not as appropriate.

CCE-5733-1

2009-07-30T19:30:10.250Z

.netrc files should exist or not as appropriate for all users.

CCE-5702-6

2009-07-30T19:30:10.250Z

.rhosts files should exist or not as appropriate for all users.

CCE-5076-5

2009-07-30T19:30:10.280Z

.shosts files should exist or not as appropriate for all users.

CCE-5442-9

2009-07-30T19:30:10.313Z

The /etc/hosts.equiv file should exist or not as appropriate.

CCE-5640-8

2009-07-30T19:30:10.313Z

2012-05-25T03:48:32.993Z

The use of NIS special characters (+ or -) in the first field of the /etc/passwd file should be allowed or disallowed as appropriate.

CCE-4893-4

2009-07-30T19:30:10.313Z

2012-05-25T03:48:33.087Z

The use of NIS special characters (+ or -) in the first field of the /etc/shadow file should be allowed or disallowed as appropriate.

CCE-5024-5

2009-07-30T19:30:10.343Z

2012-05-25T03:48:33.150Z

The use of NIS special characters (+ or -) in the first field of the /etc/group file should be allowed or disallowed as appropriate.

CCE-5742-2

2009-07-30T19:30:10.360Z

The /etc/shells file should exist or not as appropriate

CCE-5777-8

2009-07-30T19:30:10.360Z

Shells referenced in /etc/passwd should be included in /etc/shells or not as appropriate

CCE-5605-1

2009-07-30T19:30:10.390Z

Groups referenced in /etc/passwd should be included in /etc/group or not as appropriate.

CCE-5750-5

2009-07-30T19:30:10.420Z

The home directory for the root account should be set appropriately.

CCE-5199-5

2009-07-30T19:30:10.420Z

The home directory for each user account should be set appropriately.

CCE-5310-8

2009-07-30T19:30:10.420Z

Home directories referenced in /etc/passwd should exist or not as appropriate

CCE-5327-2

2009-07-30T19:30:10.453Z

All device files should be located inside an appropriate directory

CCE-4900-7

2009-07-30T19:30:10.453Z

The ntpd service should be enabled or disabled as appropriate.

CCE-5675-4

2009-07-30T19:30:10.467Z

The Network Time Protocol (ntp) synchronization server should be set appropriately.

CCE-5147-4

2009-07-30T19:30:10.517Z

All logon attempts should be logged or not logged as appropriate

CCE-5724-0

2009-07-30T19:30:10.547Z

All su (switch user) activity should be logged or not as appropriate

CCE-5614-3

2009-07-30T19:30:10.547Z

Filesystem logging/journaling should be performed or not as appropriate

CCE-5834-7

2009-07-30T19:30:10.577Z

Automount should be enabled or disabled as appropriate

CCE-5745-5

2009-07-30T19:30:10.627Z

Source-routed packets should be accepted or rejected as appropriate.

CCE-5587-1

2009-07-30T19:30:10.640Z

Response to ICMP timestamp requests should be enabled or disabled as appropriate

CCE-5525-1

2009-07-30T19:30:10.670Z

Response to ICMP timestamp broadcast requests should be enabled or disabled as appropriate

CCE-4930-4

2009-07-30T19:30:10.717Z

Response to ICMP echo (ping) requests should be enabled or disabled as appropriate

CCE-4901-5

2009-07-30T19:30:10.717Z

Executable stack should be enabled or disabled as appropriate

CCE-5017-9

2009-07-30T19:30:10.767Z

The default gateway should be set appropriately.

CCE-5347-0

2009-07-30T19:30:10.767Z

The inetd service should be enabled or disabled as appropriate.

CCE-5193-8

2009-07-30T19:30:10.780Z

echo service should be enabled or disabled as appropriate

CCE-5725-7

2009-07-30T19:30:10.813Z

netstat service should be enabled or disabled as appropriate

CCE-5801-6

2009-07-30T19:30:10.843Z

rcp service should be enabled or disabled as appropriate

CCE-5506-1

2009-07-30T19:30:10.843Z

chargen service should be enabled or disabled as appropriate

CCE-5791-9

2009-07-30T19:30:10.843Z

finger service should be enabled or disabled as appropriate

CCE-5743-0

2009-07-30T19:30:10.877Z

tftpd service should be enabled or disabled as appropriate

CCE-5773-7

2009-07-30T19:30:10.877Z

walld service should be enabled or disabled as appropriate

CCE-5461-9

2009-07-30T19:30:10.890Z

rstatd service should be enabled or disabled as appropriate

CCE-4905-6

2009-07-30T19:30:10.920Z

sprayd service should be enabled or disabled as appropriate

CCE-5463-5

2009-07-30T19:30:10.953Z

rusersd service should be enabled or disabled as appropriate

CCE-5542-6

2009-07-30T19:30:10.953Z

rlogin service should be enabled or disabled as appropriate

CCE-5431-2

2009-07-30T19:30:10.953Z

rsh service should be enabled or disabled as appropriate

CCE-5780-2

2009-07-30T19:30:11.000Z

ftp service should be enabled or disabled as appropriate

CCE-5872-7

2009-07-30T19:30:11.000Z

telnet service should be enabled or disabled as appropriate

CCE-4909-8

2009-07-30T19:30:11.017Z

2013-02-14T05:56:42.477Z

DEPRECATED.

CCE-5343-9

2009-07-30T19:30:11.030Z

inn service should be enabled or disabled as appropriate

CCE-5611-9

2009-07-30T19:30:11.063Z

uucp service should be enabled or disabled as appropriate

CCE-5598-8

2009-07-30T19:30:11.077Z

rexec service should be enabled or disabled as appropriate

CCE-5550-9

2009-07-30T19:30:11.077Z

inetd logging should be enabled or disabled as appropriate

CCE-4911-4

2009-07-30T19:30:11.110Z

font-service should be enabled or disabled as appropriate

CCE-4926-2

2009-07-30T19:30:11.110Z

imap2 service should be enabled or disabled as appropriate

CCE-4913-0

2009-07-30T19:30:11.110Z

pop3 service should be enabled or disabled as appropriate

CCE-5681-2

2009-07-30T19:30:11.140Z

ident service should be enabled or disabled as appropriate

CCE-5368-6

2009-07-30T19:30:11.170Z

rexd service should be enabled or disabled as appropriate

CCE-5549-1

2009-07-30T19:30:11.170Z

daytime service should be enabled or disabled as appropriate

CCE-5144-1

2009-07-30T19:30:11.187Z

dtspc (cde-spc) service should be enabled or disabled as appropriate

CCE-5223-3

2009-07-30T19:30:11.217Z

rquotad service should be enabled or disabled as appropriate

CCE-5738-0

2009-07-30T19:30:11.217Z

cmsd service should be enabled or disabled as appropriate

CCE-5456-9

2009-07-30T19:30:11.217Z

tooltalk service should be enabled or disabled as appropriate

CCE-4918-9

2009-07-30T19:30:11.250Z

xdmcp service should be enabled or disabled as appropriate

CCE-5798-4

2009-07-30T19:30:11.280Z

discard service should be enabled or disabled as appropriate

CCE-4923-9

2009-07-30T19:30:11.280Z

2013-02-14T05:56:43.167Z

DEPRECATED.

CCE-5917-0

2009-07-30T19:30:11.297Z

vino-server service should be enabled or disabled as appropriate

CCE-4934-6

2009-07-30T19:30:11.327Z

The bind service should be enabled or disabled as appropriate.

CCE-5535-0

2009-07-30T19:30:11.327Z

The version string reported by the bind service should be configured appropriately.

CCE-5117-7

2009-07-30T19:30:11.327Z

SSH Protocol v1 should be enabled or disabled as appropriate

CCE-5690-3

2009-07-30T19:30:11.360Z

TCP_WRAPPERS should be enabled or disabled as appropriate

CCE-5852-9

2009-07-30T19:30:11.390Z

SNMP version 1 should be enabled or disabled as appropriate

CCE-5068-2

2009-07-30T19:30:11.390Z

The nfsd service should be enabled or disabled as appropriate

CCE-5569-9

2009-07-30T19:30:11.390Z

The mountd service should be enabled or disabled as appropriate

CCE-5806-5

2009-07-30T19:30:11.420Z

The statd service should be enabled or disabled as appropriate

CCE-5882-6

2009-07-30T19:30:11.437Z

The lockd service should be enabled or disabled as appropriate

CCE-5414-8

2009-07-30T19:30:11.437Z

NFS should be configured to respond or not as appropriate to client requests that do not include a user id .

CCE-5348-8

2009-07-30T19:30:11.467Z

NFS should be configured to respond or not as appropriate to client requests that do not originate from a privileged port.

CCE-5511-1

2009-07-30T19:30:11.500Z

NFS server support for the AUTH_NONE authentication mechanism should be enabled or disabled as appropriate.

CCE-5480-9

2009-07-30T19:30:11.500Z

NFS server support for the AUTH_UNIX authentication mechanism should be enabled or disabled as appropriate.

CCE-4957-7

2009-07-30T19:30:11.500Z

NFS server support for the AUTH_DES authentication mechanism should be enabled or disabled as appropriate.

CCE-4958-5

2009-07-30T19:30:11.530Z

NFS server support for the AUTH_KERB authentication mechanism should be enabled or disabled as appropriate.

CCE-5922-0

2009-07-30T19:30:11.547Z

The read-only (ro) option should be enabled or disabled as appropriate for all NFS exports.

CCE-5790-1

2009-07-30T19:30:11.547Z

The nosuid option should be enabled or disabled for all NFS mounts as appropriate

CCE-5189-6

2009-07-30T19:30:11.547Z

The nosgid option should be enabled or disabled for all NFS mounts as appropriate

CCE-5876-8

2009-07-30T19:30:11.547Z

Sendmail should be enabled or disabled as appropriate

CCE-4959-3

2009-07-30T19:30:11.563Z

The sendmail banner should be set appropriately.

CCE-5115-1

2009-07-30T19:30:11.563Z

The decode sendmail alias should be enabled or disabled as appropriate.

CCE-5445-2

2009-07-30T19:30:11.563Z

.forward files should be allowed or disallowed as appropriate for all users

CCE-4960-1

2009-07-30T19:30:11.577Z

Programs executed through the aliases file should be owned by an appropriate user

CCE-5802-4

2009-07-30T19:30:11.577Z

Programs executed through the aliases file should reside a directory with an appropriate user owner

CCE-5212-6

2009-07-30T19:30:11.577Z

Sendmail vrfy command should be allowed or not as appropriate

CCE-5291-0

2009-07-30T19:30:11.577Z

Sendmail expn command should be allowed or not as appropriate

CCE-5741-4

2009-07-30T19:30:11.593Z

Sendmail should be configured with an appropriate logging level

CCE-4967-6

2009-07-30T19:30:11.593Z

The sendmail help command should be allowed or not as appropriate

CCE-5783-6

2009-07-30T19:30:11.593Z

NIS should be enabled or disabled as appropriate

CCE-4975-9

2009-07-30T19:30:11.593Z

NIS+ server should operate at an appropriate security level

CCE-5138-3

2009-07-30T19:30:11.610Z

X-Windows should be enabled or disabled as appropriate

CCE-5711-7

2009-07-30T19:30:11.610Z

Authorized X-clients should be listed or not in the X*.hosts file as appropriate

CCE-4984-1

2009-07-30T19:30:11.610Z

X-Windows should write .Xauthority files to users' home directories or not as appropriate

CCE-5975-8

2009-07-30T19:30:11.627Z

X11 forwarding via SSH should be enabled or disabled as appropriate.

CCE-5931-1

2009-07-30T19:30:11.627Z

Samba should be enabled or disabled as appropriate

CCE-4994-0

2009-07-30T19:30:11.627Z

Samba 'hosts allow' option should be configured with an appropriate set of networks

CCE-5923-8

2009-07-30T19:30:11.627Z

Samba 'security option' option should be set as appropriate

CCE-5939-4

2009-07-30T19:30:11.640Z

Samba 'encrypt' passwords option should be set as appropriate

CCE-5891-7

2009-07-30T19:30:11.640Z

Samba 'smb passwd file' option should be set to an appropriate password file or no password file

CCE-5234-0

2009-07-30T19:30:11.640Z

IPv6 should be enabled or disabled as appropriate

CCE-5767-9

2009-07-30T19:30:11.657Z

The "at" utility directory permissions should be set as appropriate

CCE-5846-1

2009-07-30T19:30:11.657Z

at.allow file permissions should be set appropriately

CCE-5991-5

2009-07-30T19:30:11.657Z

at.deny file permissions should be set appropriately

CCE-5705-9

2009-07-30T19:30:11.670Z

Cron directory permissions should be set appropriately

CCE-5678-8

2009-07-30T19:30:11.670Z

Crontab directory permissions should be set appropriately

CCE-5942-8

2009-07-30T19:30:11.670Z

Cron log file permissions should be set appropriately

CCE-5770-3

2009-07-30T19:30:11.670Z

cron.allow file permissions should be set appropriately

CCE-5280-3

2009-07-30T19:30:11.687Z

cron.deny file permissions should be set appropriately

CCE-5896-6

2009-07-30T19:30:11.687Z

Crontab file permissions should be set appropriately

CCE-5474-2

2009-07-30T19:30:11.687Z

/dev/kmem file permissions should be set appropriately

CCE-5363-7

2009-07-30T19:30:11.703Z

/dev/mem file permissions should be set appropriately

CCE-5566-5

2009-07-30T19:30:11.703Z

/dev/null file permissions should be set appropriately

CCE-5851-1

2009-07-30T19:30:11.703Z

resolv.conf file permissions should be set appropriately

CCE-5821-4

2009-07-30T19:30:11.703Z

/etc/named.conf file permissions should be set appropriately

CCE-5755-4

2009-07-30T19:30:11.717Z

File permissions should be set appropriately for all user home directories.

CCE-5807-3

2009-07-30T19:30:11.717Z

/etc/exports file permissions should be set appropriately

CCE-5759-6

2009-07-30T19:30:11.733Z

/usr/bin/at file permissions should be set appropriately

CCE-5979-0

2009-07-30T19:30:11.733Z

/usr/bin/rdist file permissions should be set appropriately

CCE-5228-2

2009-07-30T19:30:11.733Z

/usr/sbin/sync file permissions should be set appropriately

CCE-5951-9

2009-07-30T19:30:11.750Z

Superuser account home directories' permissions should be set appropriately

CCE-5981-6

2009-07-30T19:30:11.750Z

/etc/samba/smb.conf file permissions should be set appropriately

CCE-5668-9

2009-07-30T19:30:11.750Z

smbpassword executable permissions should be set appropriately

CCE-5010-4

2009-07-30T19:30:11.767Z

Aliases file permissions should be set appropriately

CCE-5666-3

2009-07-30T19:30:11.767Z

File permissions should be set as appropriate for the log file configured to capture critical sendmail messages.

CCE-5012-0

2009-07-30T19:30:11.767Z

All files executed through /etc/aliases file entries should have file permissions set appropriately

CCE-5796-8

2009-07-30T19:30:11.767Z

/bin/csh file permissions should be set appropriately

CCE-5747-1

2009-07-30T19:30:11.780Z

/bin/jsh file permissions should be set appropriately

CCE-5849-5

2009-07-30T19:30:11.780Z

/bin/ksh file permissions should be set appropriately

CCE-5893-3

2009-07-30T19:30:11.797Z

The /bin/rsh file should exist or not as appropriate

CCE-5734-9

2009-07-30T19:30:11.797Z

/bin/sh file permissions should be set appropriately

CCE-5862-8

2009-07-30T19:30:11.797Z

/bin/bash file permissions should be set appropriately

CCE-5954-3

2009-07-30T19:30:11.797Z

/sbin/csh file permissions should be set appropriately

CCE-5027-8

2009-07-30T19:30:11.813Z

/sbin/jsh file permissions should be set appropriately

CCE-5206-8

2009-07-30T19:30:11.813Z

/sbin/ksh file permissions should be set appropriately

CCE-5907-1

2009-07-30T19:30:11.813Z

The /sbin/rsh file should exist or not as appropriate

CCE-5040-1

2009-07-30T19:30:11.827Z

/sbin/sh file permissions should be set appropriately

CCE-5049-2

2009-07-30T19:30:11.827Z

/sbin/bash file permissions should be set appropriately

CCE-5056-7

2009-07-30T19:30:11.827Z

/usr/bin/csh file permissions should be set appropriately

CCE-6031-9

2009-07-30T19:30:11.843Z

/usr/bin/jsh file permissions should be set appropriately

CCE-6004-6

2009-07-30T19:30:11.843Z

/usr/bin/ksh file permissions should be set appropriately

CCE-5974-1

2009-07-30T19:30:11.843Z

The /usr/bin/rsh file should exist or not as appropriate

CCE-5863-6

2009-07-30T19:30:11.860Z

/usr/bin/sh file permissions should be set appropriately

CCE-5815-6

2009-07-30T19:30:11.860Z

/usr/bin/bash file permissions should be set appropriately

CCE-5955-0

2009-07-30T19:30:11.860Z

snmpd.conf file permissions should be set appropriately

CCE-6052-5

2009-07-30T19:30:11.877Z

/tmp file permissions should be set appropriately

CCE-6021-0

2009-07-30T19:30:11.877Z

/usr/tmp file permissions should be set appropriately

CCE-5272-0

2009-07-30T19:30:11.877Z

traceroute executable file permissions should be set appropriately

CCE-5884-2

2009-07-30T19:30:11.877Z

.Xauthority file permissions should be set appropriately for all users.

CCE-6023-6

2009-07-30T19:30:11.890Z

/etc/aliases file permissions should be set appropriately

CCE-5349-6

2009-07-30T19:30:11.890Z

/etc/cron.d/at.allow file permissions should be set appropriately

CCE-6050-9

2009-07-30T19:30:11.890Z

/etc/cron.d/cron.allow file permissions should be set appropriately

CCE-5833-9

2009-07-30T19:30:11.907Z

/etc/csh file permissions should be set appropriately

CCE-5803-2

2009-07-30T19:30:11.907Z

/etc/default/* file permissions should be set appropriately

CCE-5820-6

2009-07-30T19:30:11.907Z

/etc/default/login file permissions should be set appropriately

CCE-5397-5

2009-07-30T19:30:11.920Z

The /etc/ftpusers file should exist or not as appropriate

CCE-5226-6

2009-07-30T19:30:11.920Z

/etc/host.lpd file permissions should be set appropriately

CCE-5903-0

2009-07-30T19:30:11.920Z

/etc/hostname* file permissions should be set appropriately

CCE-5970-9

2009-07-30T19:30:11.920Z

/etc/hosts file permissions should be set appropriately

CCE-5930-3

2009-07-30T19:30:11.937Z

/etc/inetd.conf file permissions should be set appropriately

CCE-5698-6

2009-07-30T19:30:11.937Z

/etc/issue file permissions should be set appropriately

CCE-5641-6

2009-07-30T19:30:11.937Z

/etc/jsh file permissions should be set appropriately

CCE-5909-7

2009-07-30T19:30:11.953Z

/etc/ksh file permissions should be set appropriately

CCE-5985-7

2009-07-30T19:30:11.953Z

/etc/mail/aliases file permissions should be set appropriately

CCE-5350-4

2009-07-30T19:30:11.953Z

/etc/motd file permissions should be set appropriately

CCE-5988-1

2009-07-30T19:30:11.967Z

/etc/netconfig file permissions should be set appropriately

CCE-5817-2

2009-07-30T19:30:11.967Z

/etc/notrouter file permissions should be set appropriately

CCE-5231-6

2009-07-30T19:30:11.967Z

/etc/pam.conf file permissions should be set appropriately

CCE-5323-1

2009-07-30T19:30:11.967Z

/etc/passwd file permissions should be set appropriately

CCE-5526-9

2009-07-30T19:30:11.983Z

The /etc/rsh file should exist or not as appropriate

CCE-5631-7

2009-07-30T19:30:11.983Z

/etc/security file permissions should be set appropriately

CCE-5728-1

2009-07-30T19:30:11.983Z

/etc/services file permissions should be set appropriately

CCE-5512-9

2009-07-30T19:30:12.000Z

/etc/sh file permissions should be set appropriately

CCE-5074-0

2009-07-30T19:30:12.000Z

/etc/shadow file permissions should be set appropriately

CCE-5808-1

2009-07-30T19:30:12.000Z

/etc/syslog.conf file permissions should be set appropriately

CCE-5075-7

2009-07-30T19:30:12.017Z

DEPRECATED.

CCE-5932-9

2009-07-30T19:30:12.017Z

/etc/fstab file permissions should be set appropriately

CCE-5825-5

2009-07-30T19:30:12.017Z

DEPRECATED.

CCE-5279-5

2009-07-30T19:30:12.017Z

2009-07-30T19:30:12.030Z

/var/adm/loginlog file permissions should be set appropriately

CCE-5984-0

2009-07-30T19:30:12.030Z

/var/adm/messages file permissions should be set appropriately

CCE-5656-4

2009-07-30T19:30:12.030Z

/var/adm/sulog file permissions should be set appropriately

CCE-5736-4

2009-07-30T19:30:12.030Z

/var/adm/utmp file permissions should be set appropriately

CCE-6062-4

2009-07-30T19:30:12.047Z

/var/adm/wtmp file permissions should be set appropriately

CCE-5453-6

2009-07-30T19:30:12.047Z

/var/adm/authlog file permissions should be set appropriately

CCE-6048-3

2009-07-30T19:30:12.047Z

/var/adm/syslog file permissions should be set appropriately

CCE-5832-1

2009-07-30T19:30:12.063Z

/var/mail file permissions should be set appropriately

CCE-6017-8

2009-07-30T19:30:12.063Z

/var/tmp file permissions should be set appropriately

CCE-5986-5

2009-07-30T19:30:12.063Z

/usr/lib/pt_chmod file permissions should be set appropriately

CCE-5875-0

2009-07-30T19:30:12.077Z

/usr/lib/embedded_us file permissions should be set appropriately

CCE-5977-4

2009-07-30T19:30:12.077Z

/usr/lib/sendmail file permissions should be set appropriately

CCE-5627-5

2009-07-30T19:30:12.077Z

/usr/kerberos/bin/rsh file permissions should be set appropriately

CCE-5455-1

2009-07-30T19:30:12.093Z

/var/spool/mail file permissions should be set appropriately

CCE-5077-3

2009-07-30T19:30:12.093Z

smbpassword file permissions should be set appropriately

CCE-5695-2

2009-07-30T19:30:12.093Z

At directory should be owned by an appropriate user

CCE-5646-5

2009-07-30T19:30:12.093Z

At directory should be owned by an appropriate group

CCE-5161-5

2009-07-30T19:30:12.110Z

at.allow file should be owned by an appropriate user

CCE-5254-8

2009-07-30T19:30:12.110Z

at.allow file should be owned by an appropriate group

CCE-5853-7

2009-07-30T19:30:12.110Z

at.deny file should be owned by an appropriate user

CCE-5632-5

2009-07-30T19:30:12.127Z

at.deny file should be owned by an appropriate group

CCE-5319-9

2009-07-30T19:30:12.127Z

Cron directories should be owned by an appropriate user

CCE-5412-2

2009-07-30T19:30:12.127Z

Cron directories should be owned by an appropriate group

CCE-5082-3

2009-07-30T19:30:12.140Z

Crontab directories should be owned by an appropriate user

CCE-5754-7

2009-07-30T19:30:12.140Z

Crontab directories should be owned by an appropriate group

CCE-6022-8

2009-07-30T19:30:12.140Z

cron.allow file should be owned by an appropriate user

CCE-5868-5

2009-07-30T19:30:12.157Z

cron.allow file should be owned by an appropriate group

CCE-5961-8

2009-07-30T19:30:12.157Z

cron.deny should be owned by an appropriate user

CCE-5837-0

2009-07-30T19:30:12.157Z

cron.deny data should be owned by an appropriate group

CCE-5929-5

2009-07-30T19:30:12.170Z

crontab files should be owned by an appropriate user

CCE-5085-6

2009-07-30T19:30:12.170Z

crontab files should be owned by an appropriate group

CCE-5919-6

2009-07-30T19:30:12.170Z

/etc/resolv.conf file should be owned by an appropriate user

CCE-5888-3

2009-07-30T19:30:12.187Z

/etc/resolv.conf file should be owned by an appropriate group

CCE-5941-0

2009-07-30T19:30:12.187Z

/etc/named.boot file should be owned by an appropriate user

CCE-5910-5

2009-07-30T19:30:12.203Z

/etc/named.boot file should be owned by an appropriate group

CCE-5822-2

2009-07-30T19:30:12.203Z

/etc/named.conf file should be owned by an appropriate user

CCE-5663-0

2009-07-30T19:30:12.203Z

/etc/named.conf file should be owned by an appropriate group

CCE-5086-4

2009-07-30T19:30:12.217Z

Each user home directory should be owned by an appropriate user.

CCE-6007-9

2009-07-30T19:30:12.217Z

Each user home directory should be owned by an appropriate group.

CCE-5088-0

2009-07-30T19:30:12.233Z

inetd.conf file should be owned by an appropriate user

CCE-5732-3

2009-07-30T19:30:12.233Z

inetd.conf file should be owned by an appropriate group

CCE-5326-4

2009-07-30T19:30:12.233Z

/etc/exports should be owned by an appropriate user

CCE-5296-9

2009-07-30T19:30:12.250Z

/etc/exports should be owned by an appropriate group

CCE-5283-7

2009-07-30T19:30:12.250Z

Exported files and directories should be owned by an appropriate user

CCE-5428-8

2009-07-30T19:30:12.250Z

Exported files and directories should be owned by an appropriate group

CCE-5626-7

2009-07-30T19:30:12.267Z

/etc/services file should be owned by an appropriate user

CCE-5957-6

2009-07-30T19:30:12.267Z

/etc/services file should be owned by an appropriate group

CCE-5740-6

2009-07-30T19:30:12.267Z

/etc/notrouter file should be owned by an appropriate user

CCE-5090-6

2009-07-30T19:30:12.280Z

/etc/notrouter file should be owned by an appropriate group

CCE-6086-3

2009-07-30T19:30:12.280Z

/etc/samba/smb.conf file should be owned by an appropriate user

CCE-6055-8

2009-07-30T19:30:12.297Z

/etc/samba/smb.conf file should be owned by an appropriate group

CCE-6024-4

2009-07-30T19:30:12.297Z

smbpasswd executable should be owned by an appropriate user

CCE-5839-6

2009-07-30T19:30:12.297Z

smbpasswd executable should be owned by an appropriate group

CCE-5091-4

2009-07-30T19:30:12.313Z

aliases file should be owned by an appropriate user

CCE-5497-3

2009-07-30T19:30:12.313Z

aliases file should be owned by an appropriate group

CCE-6029-3

2009-07-30T19:30:12.313Z

The log file configured to capture critical sendmail messages should be owned by the appropriate user.

CCE-5116-9

2009-07-30T19:30:12.327Z

The log file configured to capture critical sendmail messages should be owned by the appropriate group.

CCE-5154-0

2009-07-30T19:30:12.327Z

Programs executed through aliases file entries should be owned by an appropriate user

CCE-6013-7

2009-07-30T19:30:12.327Z

Programs executed through aliases file entries should be owned by an appropriate group

CCE-5999-8

2009-07-30T19:30:12.343Z

Shell files should be owned by an appropriate user

CCE-6003-8

2009-07-30T19:30:12.343Z

Shell files should be owned by an appropriate group

CCE-6096-2

2009-07-30T19:30:12.360Z

snmpd.conf file should be owned by an appropriate user

CCE-6107-7

2009-07-30T19:30:12.360Z

snmpd.conf file should be owned by an appropriate group

CCE-5171-4

2009-07-30T19:30:12.360Z

/etc/syslog.conf file should be owned by an appropriate user

CCE-5688-7

2009-07-30T19:30:12.377Z

/etc/syslog.conf file should be owned by an appropriate group

CCE-5185-4

2009-07-30T19:30:12.377Z

traceroute executable should be owned by an appropriate user

CCE-5671-3

2009-07-30T19:30:12.377Z

traceroute executable should be owned by an appropriate group

CCE-5706-7

2009-07-30T19:30:12.390Z

/usr/lib/sendmail file should be owned by an appropriate user

CCE-6177-0

2009-07-30T19:30:12.390Z

/usr/lib/sendmail file should be owned by an appropriate group

CCE-5860-2

2009-07-30T19:30:12.407Z

/etc/passwd file should be owned by an appropriate user

CCE-6146-5

2009-07-30T19:30:12.407Z

/etc/passwd file should be owned by an appropriate group

CCE-5992-3

2009-07-30T19:30:12.407Z

/etc/shadow file should be owned by an appropriate user

CCE-5615-0

2009-07-30T19:30:12.420Z

/etc/shadow file should be owned by an appropriate group

CCE-5580-6

2009-07-30T19:30:12.420Z

smbpasswd file should be owned by an appropriate user

CCE-5191-2

2009-07-30T19:30:12.420Z

smbpasswd file should be owned by an appropriate group

CCE-6088-9

2009-07-30T19:30:12.437Z

Environmental variable PATH for superuser accounts should or should not contain world-writable files as appropriate

CCE-6044-2

2009-07-30T19:30:12.437Z

Environmental variable PATH for superuser accounts should not contain the current directory as the first or last entry

CCE-5195-3

2009-07-30T19:30:12.453Z

2012-05-25T03:48:41.430Z

The current working directory should or should not be added to the environmental variable PATH by global initialization files as appropriate

CCE-6012-9

2009-07-30T19:30:12.453Z

The current working directory should or should not be added to the environmental variable PATH by local initialization files as appropriate

CCE-5361-1

2009-07-30T19:30:12.453Z

DEPRECATED.

CCE-5204-3

2009-07-30T19:30:12.467Z

The current working directory should or should not be added to the environmental variable PATH by run control scripts as appropriate

CCE-6087-1

2009-07-30T19:30:12.467Z

The system umask should be set appropriately

CCE-6056-6

2009-07-30T19:30:12.483Z

The user umask should be set appropriately

CCE-5816-4

2009-07-30T19:30:12.483Z

The cron.allow file should be configured with the set of users permitted to use the cron facility as appropriate.

CCE-5785-1

2009-07-30T19:30:12.483Z

The cron.deny file should be configured with the set of users not permitted to use the cron facility as appropriate.

CCE-5661-4

2009-07-30T19:30:12.500Z

Cron logging should be enabled or disabled as appropriate

CCE-5877-6

2009-07-30T19:30:12.500Z

The at.allow file should be configured with the set of users permitted to use the at facility as appropriate.

CCE-5600-2

2009-07-30T19:30:12.500Z

The at.deny file should be configured with the set of users not permitted to use the at facility as appropriate.

CCE-5489-0

2009-07-30T19:30:12.517Z

/etc/security/audit/config file permissions should be set appropriately

CCE-6066-5

2009-07-30T19:30:12.517Z

/etc/security/audit/events file permissions should be set appropriately

CCE-6084-8

2009-07-30T19:30:12.530Z

/etc/security/audit/objects file permissions should be set appropriately

CCE-5819-8

2009-07-30T19:30:12.530Z

/usr/lib/trcload file permissions should be set appropriately

CCE-5648-1

2009-07-30T19:30:12.530Z

/usr/lib/semutil file permissions should be set appropriately

CCE-5205-0

2009-07-30T19:30:12.547Z

/etc/security/audit/config file should be owned by an appropriate user

CCE-5548-3

2009-07-30T19:30:12.547Z

/etc/security/audit/events file should be owned by an appropriate user

CCE-6085-5

2009-07-30T19:30:12.547Z

/etc/security/audit/objects file should be owned by an appropriate user

CCE-5926-1

2009-07-30T19:30:12.563Z

/usr/lib/trcload file should be owned by an appropriate user

CCE-5224-1

2009-07-30T19:30:12.563Z

/usr/lib/semutil file should be owned by an appropriate user

CCE-6037-6

2009-07-30T19:30:12.577Z

/etc/security/audit/config file should be owned by an appropriate group

CCE-6011-1

2009-07-30T19:30:12.577Z

/etc/security/audit/events file should be owned by an appropriate group

CCE-5980-8

2009-07-30T19:30:12.577Z

/etc/security/audit/objects file should be owned by an appropriate group

CCE-6103-6

2009-07-30T19:30:12.593Z

/usr/lib/trcload file should be owned by an appropriate group

CCE-5945-1

2009-07-30T19:30:12.593Z

/usr/lib/semutil file should be owned by an appropriate group

CCE-6079-8

2009-07-30T19:30:12.593Z

The authentication mechanism (SYSTEM attribute) should be set appropriately for each user

CCE-6158-0

2009-07-30T19:30:12.610Z

Trusted Computing Base should be installed or not as appropriate

CCE-5484-1

2009-07-30T19:30:12.610Z

Auditing should be enabled or disabled as appropriate in runcontrol scripts

CCE-5378-5

2009-07-30T19:30:12.627Z

BIN mode auditing should be enabled or disabled as appropriate

CCE-5235-7

2009-07-30T19:30:12.627Z

Accounts should be present or absent from the audit config file as appropriate

CCE-5913-9

2009-07-30T19:30:12.627Z

System logons should be audited or not as appropriate

CCE-5993-1

2009-07-30T19:30:12.640Z

System logoffs should be audited or not as appropriate

CCE-5693-7

2009-07-30T19:30:12.640Z

Password changes should be audited or not as appropriate

CCE-6230-7

2009-07-30T19:30:12.657Z

su usage should be audited or not as appropriate

CCE-5697-8

2009-07-30T19:30:12.657Z

Creation/modification of superuser groups should be audited or not as appropriate

CCE-6197-8

2009-07-30T19:30:12.657Z

Startup/shutdown of audit functions should be audited or not as appropriate

CCE-5889-1

2009-07-30T19:30:12.670Z

Certificate revocation should be audited or not as appropriate

CCE-6109-3

2009-07-30T19:30:12.670Z

Remote access from outside the corporate network should be audited or not as appropriate

CCE-5242-3

2009-07-30T19:30:12.687Z

Use of chown command should be audited or not as appropriate

CCE-6213-3

2009-07-30T19:30:12.703Z

File permissions of the rcp binary should be set correctly

CCE-5680-4

2009-07-30T19:30:12.703Z

File permissions of the rlogin binary should be set correctly

CCE-5591-3

2009-07-30T19:30:12.717Z

File permissions of the rlogind binary should be set correctly

CCE-5543-4

2009-07-30T19:30:12.717Z

File permissions of the rsh binary should be set correctly

CCE-5934-5

2009-07-30T19:30:12.717Z

File permissions of the rshd binary should be set correctly

CCE-6009-5

2009-07-30T19:30:12.733Z

File permissions of the tftp binary should be set correctly

CCE-5996-4

2009-07-30T19:30:12.733Z

File permissions of the tftpd binary should be set correctly

CCE-6135-8

2009-07-30T19:30:12.750Z

Global initialization files should allow or deny write access to the terminal as appropriate

CCE-5963-4

2009-07-30T19:30:12.750Z

Netrc should be configured with an appropriate set of services

CCE-6104-4

2009-07-30T19:30:12.750Z

Change of file ownership should be audited or not as appropriate

CCE-5324-9

2009-07-30T19:30:12.767Z

Use of chmod command should be audited or not as appropriate

CCE-6170-5

2009-07-30T19:30:12.767Z

Certificate creation should be audited or not as appropriate

CCE-5243-1

2009-07-30T19:30:12.767Z

Certificate deletion should be audited or not as appropriate

CCE-6016-0

2009-07-30T19:30:12.780Z

Certificate retrieval should be audited or not as appropriate

CCE-6174-7

2009-07-30T19:30:12.780Z

Startup or shutdown of the audit process should be audited or not as appropriate

CCE-5245-6

2009-07-30T19:30:12.780Z

Use of chgrp should be audited or not as appropriate

CCE-5253-0

2009-07-30T19:30:12.797Z

Use of mkgroup should be audited or not as appropriate

CCE-6189-5

2009-07-30T19:30:12.797Z

Use of rmgroup should be audited or not as appropriate

CCE-6035-0

2009-07-30T19:30:12.813Z

Use of change user functions should be audited or not as appropriate

CCE-6100-2

2009-07-30T19:30:12.813Z

Terminal logoffs should be audited or not as appropriate

CCE-6157-2

2009-07-30T19:30:12.827Z

Exit function usage should be audited or not as appropriate

CCE-6156-4

2009-07-30T19:30:12.827Z

Hard core dump size limits should be set appropriately

CCE-5751-3

2009-07-30T19:30:12.827Z

Remote root logins via SSH should be allowed or not as appropriate.

CCE-5435-3

2009-07-30T19:30:12.843Z

/export/home should be configured on an appropriate filesystem logical volume

AC-3

CM-6

CCE-6030-1

2009-07-30T19:30:12.843Z

/var should be configured on an appropriate filesystem logical volume

SC-2

CCE-5936-0

2009-07-30T19:30:12.843Z

/opt should be configured on an appropriate filesystem logical volume

SC-2

CCE-6122-6

2009-07-30T19:30:12.860Z

The shell for the root account should be located on the appropriate filesystem

AC-6

CM-5

CM-6

CM-7

CCE-6091-3

2009-07-30T19:30:12.860Z

Core dump size limits should be set appropriately

SC-5

CCE-6249-7

2009-07-30T19:30:12.860Z

The read-only SNMP community string should be set appropriately.

AC-3

CM-6

CM-7

IA-5

CCE-6095-4

2009-07-30T19:30:12.877Z

The read/write SNMP community string should be set appropriately.

AC-3

CM-6

CM-7

IA-5

CCE-6108-5

2009-07-30T19:30:12.877Z

Password policy should ban or allow usernames or UIDs in passwords as appropriate

IA-5

CCE-5812-3

2009-07-30T19:30:12.890Z

Password policy should ban or allow words found in a dictionary as appropriate.

IA-5

CCE-6161-4

2009-07-30T19:30:12.890Z

Password policy should enforce the correct amount of special characters

IA-5

CCE-6172-1

2009-07-30T19:30:12.890Z

Password policy should enforce or not enforce the requirement to have mixed case passwords as appropriate.

IA-5

CCE-5639-0

2009-07-30T19:30:12.907Z

The minimum password age should be set as appropriate

AC-3

CM-6

CM-7

IA-5

CCE-6163-0

2009-07-30T19:30:12.907Z

The minimum required password length should be set as appropriate

AC-3

CM-6

CM-7

IA-5

CCE-5982-4

2009-07-30T19:30:12.907Z

Password history should be saved for an appropriate number of password changes

IA-5

CCE-5956-8

2009-07-30T19:30:12.920Z

The number of consecutive failed login attempts required to trigger a lockout should be set as appropriate

AC-7

CCE-6219-0

2009-07-30T19:30:12.920Z

AC-3

CM-6

IA-5

CCE-5925-3

2009-07-30T19:30:12.920Z

New users should be required or not required to change their password on first login as appropriate

CM-6

IA-5

CCE-6140-8

2009-07-30T19:30:12.937Z

Access to single-user mode (maintainence mode) should require the root password or not as appropriate

AC-3

AC-6

CCE-6180-4

2009-07-30T19:30:12.937Z

The delay between failed logins should be set as appropriate

AC-3

CM-6

CM-7

CCE-6114-3

2009-07-30T19:30:12.953Z

All files should be owned by an existing account or not as appropriate.

AC-3

CM-6

CCE-6120-0

2009-07-30T19:30:12.953Z

All files should be owned by an existing group or not as appropriate.

AC-3

CM-6

CCE-6094-7

2009-07-30T19:30:12.953Z

The console login banner should be set appropriately.

AC-3

AC-8

CM-6

CCE-5561-6

2009-07-30T19:30:12.967Z

The SSH login banner should be set appropriately.

AC-3

AC-8

CM-6

CCE-5583-0

2009-07-30T19:30:12.967Z

The telnet login banner should be set appropriately.

AC-3

AC-8

CM-6

CCE-5552-5

2009-07-30T19:30:12.967Z

The ftp login banner should be set appropriately.

AC-3

AC-8

CM-6

CCE-5255-5

2009-07-30T19:30:12.983Z

The graphical login banner should be set appropriately.

AC-3

AC-8

CM-6

CCE-6043-4

2009-07-30T19:30:12.983Z

Accounts other than root should be allowed to have the UID 0 or not as appropriate

AC-2

CCE-6117-6

2009-07-30T19:30:13.000Z

Accounts other than root and locked system accounts should be allowed to have a GID of 0 or not as appropriate

AC-2

CCE-5883-4

2009-07-30T19:30:13.000Z

Each account should be assigned a unique UID or not as appropriate

AC-3

CM-6

CCE-5261-3

2009-07-30T19:30:13.000Z

The ftp account should exist or not as appropriate

AC-3

CM-6

CCE-5495-7

2009-07-30T19:30:13.017Z

AC-3

CM-6

CCE-5949-3

2009-07-30T19:30:13.017Z

The screen lock should activate after an appropriate period of inactivity

AC-1

AC-3

CM-6

CM-7

CCE-6147-3

2009-07-30T19:30:13.017Z

File permissions should be set appropriately for all shell executables.

AC-3

CM-6

CCE-6182-0

2009-07-30T19:30:13.030Z

Remote (serial) consoles should be enabled or disabled as appropriate.

AC-1

SC-7

CCE-5764-6

2009-07-30T19:30:13.030Z

Root logins should be restricted to the console or not as appropriate.

AC-1

SC-7

CCE-6151-5

2009-07-30T19:30:13.047Z

.netrc files should exist or not as appropriate for all users.

AC-3

CM-6

CCE-5516-0

2009-07-30T19:30:13.047Z

.rhosts files should exist or not as appropriate for all users.

AC-3

CM-6

CCE-6089-7

2009-07-30T19:30:13.047Z

.shosts files should exist or not as appropriate for all users.

AC-3

CM-6

CCE-5873-5

2009-07-30T19:30:13.063Z

The /etc/hosts.equiv file should exist or not as appropriate.

AC-3

CM-6

CM-7

CCE-6186-1

2009-07-30T19:30:13.063Z

The /etc/shells file should exist or not as appropriate

CM-6

CCE-6191-1

2009-07-30T19:30:13.077Z

Shells referenced in /etc/passwd should be included in /etc/shells or not as appropriate

CM-6

CCE-8640-5

2009-07-30T19:30:13.077Z

2012-05-25T03:48:53.807Z

The use of NIS special characters (+ or -) in the first field of the /etc/passwd file should be allowed or disallowed as appropriate.

AC-4

SC-5

SC-7

CCE-8240-4

2009-07-30T19:30:13.077Z

2012-05-25T03:48:53.867Z

The use of NIS special characters (+ or -) in the first field of the /etc/shadow file should be allowed or disallowed as appropriate.

AC-4

SC-5

SC-7

CCE-8631-4

2009-07-30T19:30:13.093Z

2012-05-25T03:48:53.930Z

The use of NIS special characters (+ or -) in the first field of the /etc/group file should be allowed or disallowed as appropriate.

AC-4

SC-5

SC-7

CCE-6208-3

2009-07-30T19:30:13.093Z

Groups referenced in /etc/passwd should be included in /etc/group or not as appropriate.

AC-2

CCE-5265-4

2009-07-30T19:30:13.093Z

The home directory for the root account should be set appropriately.

AC-3

CM-6

CCE-6133-3

2009-07-30T19:30:13.110Z

The home directory for each user account should be set appropriately.

AC-3

CM-6

CCE-5797-6

2009-07-30T19:30:13.110Z

Home directories referenced in /etc/passwd should exist or not as appropriate

AC-3

CM-6

CCE-5886-7

2009-07-30T19:30:13.127Z

All device files should be located inside an appropriate path

AC-6

CCE-5762-0

2009-07-30T19:30:13.127Z

The ntpd service should be enabled or disabled as appropriate.

AU-8

CM-6

CM-7

CCE-5987-3

2009-07-30T19:30:13.127Z

The Network Time Protocol (ntp) synchronization server should be set appropriately.

AU-8

CM-6

CCE-5828-9

2009-07-30T19:30:13.140Z

The default gateway should be set appropriately.

CM-7

CCE-5927-9

2009-07-30T19:30:13.140Z

The inetd service should be enabled or disabled as appropriate.

CM-6

CM-7

CCE-6143-2

2009-07-30T19:30:13.157Z

echo service should be enabled or disabled as appropriate

CM-6

CM-7

CCE-6054-1

2009-07-30T19:30:13.157Z

netstat service should be enabled or disabled as appropriate

CM-6

CM-7

CCE-6010-3

2009-07-30T19:30:13.157Z

rcp service should be enabled or disabled as appropriate

CM-6

CM-7

CCE-5460-1

2009-07-30T19:30:13.170Z

chargen service should be enabled or disabled as appropriate

CM-6

CM-7

CCE-5618-4

2009-07-30T19:30:13.170Z

finger service should be enabled or disabled as appropriate

CM-6

CM-7

CCE-5838-8

2009-07-30T19:30:13.187Z

tftpd service should be enabled or disabled as appropriate

CM-6

CM-7

CCE-5878-4

2009-07-30T19:30:13.187Z

walld service should be enabled or disabled as appropriate

CM-6

CM-7

CCE-5266-2

2009-07-30T19:30:13.187Z

rstatd service should be enabled or disabled as appropriate

CM-6

CM-7

CCE-6138-2

2009-07-30T19:30:13.203Z

sprayd service should be enabled or disabled as appropriate

CM-6

CM-7

CCE-6057-4

2009-07-30T19:30:13.203Z

rusersd service should be enabled or disabled as appropriate

CM-6

CM-7

CCE-5885-9

2009-07-30T19:30:13.203Z

rlogin service should be enabled or disabled as appropriate

CM-6

CM-7

CCE-5978-2

2009-07-30T19:30:13.217Z

rsh service should be enabled or disabled as appropriate

CM-6

CM-7

CCE-5607-7

2009-07-30T19:30:13.217Z

ftp service should be enabled or disabled as appropriate

CM-6

CM-7

CCE-6075-6

2009-07-30T19:30:13.233Z

telnet service should be enabled or disabled as appropriate

CM-6

CM-7

CCE-6232-3

2009-07-30T19:30:13.233Z

DEPRECATED.

CCE-6171-3

2009-07-30T19:30:13.250Z

inn service should be enabled or disabled as appropriate

CM-6

CM-7

CCE-5638-2

2009-07-30T19:30:13.250Z

uucp service should be enabled or disabled as appropriate

CM-6

CM-7

CCE-6175-4

2009-07-30T19:30:13.267Z

rexec service should be enabled or disabled as appropriate

CM-6

CM-7

CCE-6144-0

2009-07-30T19:30:13.267Z

font-service should be enabled or disabled as appropriate

CM-6

CM-7

CCE-5763-8

2009-07-30T19:30:13.267Z

imap2 service should be enabled or disabled as appropriate

CM-6

CM-7

CCE-5856-0

2009-07-30T19:30:13.280Z

pop3 service should be enabled or disabled as appropriate

CM-6

CM-7

CCE-6081-4

2009-07-30T19:30:13.280Z

ident service should be enabled or disabled as appropriate

CM-6

CM-7

CCE-6093-9

2009-07-30T19:30:13.280Z

rexd service should be enabled or disabled as appropriate

CM-6

CM-7

CCE-6173-9

2009-07-30T19:30:13.297Z

daytime service should be enabled or disabled as appropriate

CM-6

CM-7

CCE-5287-8

2009-07-30T19:30:13.297Z

dtspc (cde-spc) service should be enabled or disabled as appropriate

CM-6

CM-7

CCE-6070-7

2009-07-30T19:30:13.313Z

rquotad service should be enabled or disabled as appropriate

CM-6

CM-7

CCE-6026-9

2009-07-30T19:30:13.313Z

cmsd service should be enabled or disabled as appropriate

CM-6

CM-7

CCE-6166-3

2009-07-30T19:30:13.313Z

tooltalk service should be enabled or disabled as appropriate

CM-6

CM-7

CCE-5867-7

2009-07-30T19:30:13.327Z

xdmcp service should be enabled or disabled as appropriate

CM-6

CM-7

CCE-5810-7

2009-07-30T19:30:13.327Z

discard service should be enabled or disabled as appropriate

CM-6

CM-7

CCE-5898-2

2009-07-30T19:30:13.343Z

DEPRECATED.

CCE-5713-3

2009-07-30T19:30:13.343Z

vino-server service should be enabled or disabled as appropriate

CM-6

CM-7

CCE-5994-9

2009-07-30T19:30:13.343Z

The bind service should be enabled or disabled as appropriate.

CM-6

CM-7

CCE-6215-8

2009-07-30T19:30:13.360Z

The version string reported by the bind service should be configured appropriately.

SC-7

CCE-5937-8

2009-07-30T19:30:13.360Z

The nfsd service should be enabled or disabled as appropriate

CM-6

CM-7

CCE-5303-3

2009-07-30T19:30:13.377Z

The mountd service should be enabled or disabled as appropriate

CM-6

CM-7

CCE-6223-2

2009-07-30T19:30:13.377Z

The statd service should be enabled or disabled as appropriate

CM-6

CCE-6069-9

2009-07-30T19:30:13.377Z

The lockd service should be enabled or disabled as appropriate

CM-6

CM-7

CCE-5320-7

2009-07-30T19:30:13.390Z

NFS should be configured with appropriate authentication methods

AC-3

CM-6

CCE-5593-9

2009-07-30T19:30:13.390Z

The read-only (ro) option should be enabled or disabled as appropriate for all NFS exports.

CM-6

CM-7

CCE-6256-2

2009-07-30T19:30:13.407Z

The nosuid option should be enabled or disabled for all NFS mounts as appropriate

AC-6

CM-6

CM-7

CCE-5596-2

2009-07-30T19:30:13.407Z

The nosgid option should be enabled or disabled for all NFS mounts as appropriate

AC-6

CM-6

CM-7

CCE-6234-9

2009-07-30T19:30:13.407Z

Sendmail should be enabled or disabled as appropriate

CM-6

CCE-6185-3

2009-07-30T19:30:13.420Z

The sendmail banner should be set appropriately.

AC-3

AC-8

CM-6

CCE-6000-4

2009-07-30T19:30:13.420Z

The decode sendmail alias should be enabled or disabled as appropriate.

CM-7

CCE-5551-7

2009-07-30T19:30:13.437Z

.forward files should be allowed or disallowed as appropriate for all users

AC-3

CM-6

CCE-6018-6

2009-07-30T19:30:13.437Z

Programs executed through the aliases file should be owned by an appropriate user

AC-3

CM-6

CCE-6141-6

2009-07-30T19:30:13.437Z

Programs executed through the aliases file should reside a directory with an appropriate user owner

AC-3

CM-6

CCE-6233-1

2009-07-30T19:30:13.453Z

Sendmail vrfy command should be allowed or not as appropriate

CM-6

CCE-5288-6

2009-07-30T19:30:13.453Z

Sendmail expn command should be allowed or not as appropriate

CM-6

CCE-6113-5

2009-07-30T19:30:13.467Z

Sendmail should be configured with an appropriate logging level

CM-6

CCE-6047-5

2009-07-30T19:30:13.467Z

Sendmail help command should be allowed or not as appropriate

CM-6

CCE-6214-1

2009-07-30T19:30:13.483Z

NIS+ server should operate at an appropriate security level

CM-6

CM-7

CCE-6051-7

2009-07-30T19:30:13.483Z

X-Windows should be enabled or disabled as appropriate

CM-6

CM-7

CCE-5756-2

2009-07-30T19:30:13.483Z

Authorized X-clients should be listed or not in the X*.hosts file as appropriate

AC-3

CM-6

CCE-5769-5

2009-07-30T19:30:13.500Z

X-Windows should write .Xauthority files to users' home directories or not as appropriate

CM-6

CM-7

CCE-5976-6

2009-07-30T19:30:13.500Z

X11 forwarding via SSH should be enabled or disabled as appropriate.

CM-6

CM-7

CCE-5438-7

2009-07-30T19:30:13.517Z

Samba should be enabled or disabled as appropriate

AC-3

CM-6

CCE-6227-3

2009-07-30T19:30:13.517Z

Samba 'hosts allow' option should be configured with an appropriate set of networks

AC-3

CM-6

CM-7

SC-5

CCE-5290-2

2009-07-30T19:30:13.517Z

Samba 'security option' option should be set as appropriate

AC-3

CM-6

CCE-6192-9

2009-07-30T19:30:13.530Z

Samba 'encrypt' passwords option should be set as appropriate

AC-3

CM-6

CM-7

SC-5

CCE-6165-5

2009-07-30T19:30:13.530Z

Samba 'smb passwd file' option should be set to an appropriate password file or no password file

AC-3

CM-6

CCE-6262-0

2009-07-30T19:30:13.547Z

IPv6 should be enabled or disabled as appropriate

CM-6

CM-7

CCE-6134-1

2009-07-30T19:30:13.547Z

/dev/kmem file permissions should be set appropriately

AC-3

CM-6

CCE-5315-7

2009-07-30T19:30:13.563Z

/dev/mem file permissions should be set appropriately

AC-3

CM-6

CCE-5912-1

2009-07-30T19:30:13.563Z

/dev/null file permissions should be set appropriately

AC-3

CM-6

CCE-6128-3

2009-07-30T19:30:13.563Z

resolv.conf file permissions should be set appropriately

AC-3

CM-6

CCE-5322-3

2009-07-30T19:30:13.577Z

/etc/named.conf file permissions should be set appropriately

AC-3

CM-6

CCE-6231-5

2009-07-30T19:30:13.577Z

/usr/bin/at file permissions should be set appropriately

AC-3

CM-6

CCE-6082-2

2009-07-30T19:30:13.593Z

/usr/bin/rdist file permissions should be set appropriately

AC-3

CM-6

CCE-6121-8

2009-07-30T19:30:13.593Z

/usr/sbin/sync file permissions should be set appropriately

AC-3

CM-6

CCE-5452-8

2009-07-30T19:30:13.593Z

Superuser account home directories' permissions should be set appropriately

AC-3

CM-6

CCE-6280-2

2009-07-30T19:30:13.610Z

/etc/samba/smb.conf file permissions should be set appropriately

AC-3

CM-6

CCE-5332-2

2009-07-30T19:30:13.610Z

smbpassword executable permissions should be set appropriately

AC-3

CM-6

CCE-5782-8

2009-07-30T19:30:13.627Z

Aliases file permissions should be set appropriately

AC-3

CM-6

CCE-5861-0

2009-07-30T19:30:13.627Z

File permissions should be set as appropriate for the log file configured to capture critical sendmail messages.

AC-3

CM-6

CCE-6248-9

2009-07-30T19:30:13.627Z

All files executed through /etc/aliases file entries should have file permissions set appropriately

AC-3

CM-6

CCE-5592-1

2009-07-30T19:30:13.640Z

/bin/csh file permissions should be set appropriately

AC-3

CM-6

CCE-5336-3

2009-07-30T19:30:13.640Z

/bin/jsh file permissions should be set appropriately

AC-3

CM-6

CCE-6205-9

2009-07-30T19:30:13.657Z

/bin/ksh file permissions should be set appropriately

AC-3

CM-6

CCE-6298-4

2009-07-30T19:30:13.657Z

The /bin/rsh file should exist or not as appropriate

CM-6

CM-7

CCE-6331-3

2009-07-30T19:30:13.670Z

/bin/sh file permissions should be set appropriately

AC-3

CM-6

CCE-6300-8

2009-07-30T19:30:13.670Z

/bin/bash file permissions should be set appropriately

AC-3

CM-6

CCE-5938-6

2009-07-30T19:30:13.670Z

/sbin/csh file permissions should be set appropriately

AC-3

CM-6

CCE-6027-7

2009-07-30T19:30:13.687Z

/sbin/jsh file permissions should be set appropriately

AC-3

CM-6

CCE-5864-4

2009-07-30T19:30:13.687Z

/sbin/ksh file permissions should be set appropriately

AC-3

CM-6

CCE-5757-0

2009-07-30T19:30:13.703Z

The /sbin/rsh file should exist or not as appropriate

CM-6

CM-7

CCE-6207-5

2009-07-30T19:30:13.703Z

/sbin/sh file permissions should be set appropriately

AC-3

CM-6

CCE-5973-3

2009-07-30T19:30:13.703Z

/sbin/bash file permissions should be set appropriately

AC-3

CM-6

CCE-5341-3

2009-07-30T19:30:13.717Z

/usr/bin/csh file permissions should be set appropriately

AC-3

CM-6

CCE-6291-9

2009-07-30T19:30:13.717Z

/usr/bin/jsh file permissions should be set appropriately

AC-3

CM-6

CCE-6306-5

2009-07-30T19:30:13.733Z

/usr/bin/ksh file permissions should be set appropriately

AC-3

CM-6

CCE-5358-7

2009-07-30T19:30:13.733Z

The /usr/bin/rsh file should exist or not as appropriate

CM-6

CM-7

CCE-6310-7

2009-07-30T19:30:13.750Z

/usr/bin/sh file permissions should be set appropriately

AC-3

CM-6

CCE-5904-8

2009-07-30T19:30:13.750Z

snmpd.conf file permissions should be set appropriately

AC-3

CM-6

CCE-6217-4

2009-07-30T19:30:13.750Z

/tmp file permissions should be set appropriately

AC-3

CM-6

CCE-5494-0

2009-07-30T19:30:13.767Z

/usr/tmp file permissions should be set appropriately

AC-3

CM-6

CCE-6221-6

2009-07-30T19:30:13.767Z

.Xauthority file permissions should be set appropriately for all users.

AC-3

CM-6

CCE-6314-9

2009-07-30T19:30:13.780Z

/etc/aliases file permissions should be set appropriately

AC-3

CM-6

CCE-6327-1

2009-07-30T19:30:13.780Z

/etc/cron.d/at.allow file permissions should be set appropriately

AC-3

CM-6

CCE-6032-7

2009-07-30T19:30:13.797Z

/etc/cron.d/cron.allow file permissions should be set appropriately

AC-3

CM-6

CCE-5915-4

2009-07-30T19:30:13.797Z

/etc/csh file permissions should be set appropriately

AC-3

CM-6

CCE-5990-7

2009-07-30T19:30:13.797Z

/etc/default/* file permissions should be set appropriately

AC-3

CM-6

CCE-6320-6

2009-07-30T19:30:13.813Z

/etc/default/login file permissions should be set appropriately

AC-3

CM-6

CCE-6236-4

2009-07-30T19:30:13.813Z

The /etc/ftpusers file should exist or not as appropriate

AC-3

CM-6

CM-7

CCE-5950-1

2009-07-30T19:30:13.827Z

/etc/host.lpd file permissions should be set appropriately

AC-3

CM-6

CCE-5362-9

2009-07-30T19:30:13.827Z

/etc/hostname* file permissions should be set appropriately

AC-3

CM-6

CCE-6068-1

2009-07-30T19:30:13.843Z

/etc/hosts file permissions should be set appropriately

AC-3

CM-6

CCE-6271-1

2009-07-30T19:30:13.843Z

/etc/inetd.conf file permissions should be set appropriately

AC-3

CM-6

CCE-6301-6

2009-07-30T19:30:13.843Z

/etc/issue file permissions should be set appropriately

AC-3

CM-6

CCE-6275-2

2009-07-30T19:30:13.860Z

/etc/jsh file permissions should be set appropriately

AC-3

CM-6

CCE-6319-8

2009-07-30T19:30:13.860Z

/etc/ksh file permissions should be set appropriately

AC-3

CM-6

CCE-5649-9

2009-07-30T19:30:13.877Z

/etc/mail/aliases file permissions should be set appropriately

AC-3

CM-6

CCE-5870-1

2009-07-30T19:30:13.877Z

/etc/motd file permissions should be set appropriately

AC-3

CM-6

CCE-6274-5

2009-07-30T19:30:13.877Z

/etc/netconfig file permissions should be set appropriately

AC-3

CM-6

CCE-5372-8

2009-07-30T19:30:13.890Z

/etc/notrouter file permissions should be set appropriately

AC-3

CM-6

CCE-5439-5

2009-07-30T19:30:13.907Z

/etc/pam.conf file permissions should be set appropriately

AC-3

CM-6

CCE-5601-0

2009-07-30T19:30:13.907Z

/etc/passwd file permissions should be set appropriately

AC-3

CM-6

CCE-6302-4

2009-07-30T19:30:13.920Z

The /etc/rsh file should exist or not as appropriate

CM-6

CM-7

CCE-5570-7

2009-07-30T19:30:13.920Z

/etc/security file permissions should be set appropriately

AC-3

CM-6

CCE-6020-2

2009-07-30T19:30:13.937Z

/etc/services file permissions should be set appropriately

AC-3

CM-6

CCE-5760-4

2009-07-30T19:30:13.937Z

/etc/sh file permissions should be set appropriately

AC-3

CM-6

CCE-5899-0

2009-07-30T19:30:13.953Z

/etc/shadow file permissions should be set appropriately

AC-3

CM-6

CCE-6225-7

2009-07-30T19:30:13.953Z

/etc/syslog.conf file permissions should be set appropriately

AC-3

CM-6

CCE-6242-2

2009-07-30T19:30:13.953Z

DEPRECATED.

CCE-6083-0

2009-07-30T19:30:13.967Z

/etc/fstab file permissions should be set appropriately

AC-3

CM-6

CCE-5683-8

2009-07-30T19:30:13.967Z

DEPRECATED.

CCE-5933-7

2009-07-30T19:30:13.983Z

/var/adm/loginlog file permissions should be set appropriately

AC-3

CM-6

CCE-6149-9

2009-07-30T19:30:13.983Z

/var/adm/messages file permissions should be set appropriately

AC-3

CM-6

CCE-6039-2

2009-07-30T19:30:14.000Z

/var/adm/sulog file permissions should be set appropriately

AC-3

CM-6

CCE-5655-6

2009-07-30T19:30:14.000Z

/var/adm/utmp file permissions should be set appropriately

AC-3

CM-6

CCE-5854-5

2009-07-30T19:30:14.017Z

/var/adm/wtmp file permissions should be set appropriately

AC-3

CM-6

CCE-6349-5

2009-07-30T19:30:14.017Z

/var/adm/authlog file permissions should be set appropriately

AC-3

CM-6

CCE-6067-3

2009-07-30T19:30:14.030Z

/var/adm/syslog file permissions should be set appropriately

AC-3

CM-6

CCE-5388-4

2009-07-30T19:30:14.030Z

/var/mail file permissions should be set appropriately

AC-3

CM-6

CCE-5691-1

2009-07-30T19:30:14.030Z

/var/tmp file permissions should be set appropriately

AC-3

CM-6

CCE-5502-0

2009-07-30T19:30:14.047Z

/usr/lib/pt_chmod file permissions should be set appropriately

AC-3

CM-6

CCE-5682-0

2009-07-30T19:30:14.047Z

/usr/lib/embedded_us file permissions should be set appropriately

AC-3

CM-6

CCE-6259-6

2009-07-30T19:30:14.063Z

/usr/lib/sendmail file permissions should be set appropriately

AC-3

CM-6

CCE-6210-9

2009-07-30T19:30:14.063Z

/usr/kerberos/bin/rsh file permissions should be set appropriately

AC-3

CM-6

CCE-5871-9

2009-07-30T19:30:14.077Z

/var/spool/mail file permissions should be set appropriately

AC-3

CM-6

CCE-5840-4

2009-07-30T19:30:14.077Z

smbpassword file permissions should be set appropriately

AC-3

CM-6

CCE-6353-7

2009-07-30T19:30:14.093Z

System files should be owned by an appropriate user

AC-3

CM-6

CCE-5393-4

2009-07-30T19:30:14.093Z

System files should be owned by an appropriate group

AC-3

CM-6

CCE-5399-1

2009-07-30T19:30:14.110Z

Default/skeleton dot files should be owned by an appropriate user

AC-3

CM-6

CCE-6179-6

2009-07-30T19:30:14.110Z

Default/skeleton dot files should be owned by an appropriate group

AC-3

CM-6

CCE-6272-9

2009-07-30T19:30:14.110Z

Global initialization files should be owned by an appropriate user

AC-3

CM-6

CCE-5403-1

2009-07-30T19:30:14.127Z

Global initialization files should be owned by an appropriate group

AC-3

CM-6

CCE-5746-3

2009-07-30T19:30:14.127Z

Home directories should be owned by an appropriate user

AC-3

CM-6

CCE-5465-0

2009-07-30T19:30:14.140Z

Home directories should be owned by an appropriate group

AC-3

CM-6

CCE-5729-9

2009-07-30T19:30:14.140Z

inetd.conf file should be owned by an appropriate user

AC-3

CM-6

CCE-5433-8

2009-07-30T19:30:14.157Z

inetd.conf file should be owned by an appropriate group

AC-3

CM-6

CCE-5879-2

2009-07-30T19:30:14.157Z

/etc/services file should be owned by an appropriate user

AC-3

CM-6

CCE-5447-8

2009-07-30T19:30:14.170Z

/etc/services file should be owned by an appropriate group

AC-3

CM-6

CCE-6046-7

2009-07-30T19:30:14.170Z

/etc/notrouter file should be owned by an appropriate user

AC-3

CM-6

CCE-5473-4

2009-07-30T19:30:14.187Z

/etc/notrouter file should be owned by an appropriate group

AC-3

CM-6

CCE-5404-9

2009-07-30T19:30:14.187Z

DEPRECATED.

CCE-6254-7

2009-07-30T19:30:14.203Z

DEPRECATED.

CCE-5425-4

2009-07-30T19:30:14.203Z

/etc/passwd file should be owned by an appropriate user

AC-3

CM-6

CCE-6372-7

2009-07-30T19:30:14.217Z

/etc/passwd file should be owned by an appropriate group

AC-3

CM-6

CCE-6283-6

2009-07-30T19:30:14.217Z

/etc/shadow file should be owned by an appropriate user

AC-3

CM-6

CCE-6001-2

2009-07-30T19:30:14.217Z

/etc/shadow file should be owned by an appropriate group

AC-3

CM-6

CCE-5451-0

2009-07-30T19:30:14.233Z

Environmental variable PATH for superuser accounts should or should not contain world-writable files as appropriate

AC-3

CM-6

CCE-5467-6

2009-07-30T19:30:14.233Z

Environmental variable PATH for superuser accounts should not contain the current directory as the first or last entry

AC-3

CM-6

CCE-6455-0

2009-07-30T19:30:14.250Z

The current directory should or should not be added to the environmental variable PATH by global initialization files as appropriate

AC-3

CM-6

CCE-5486-6

2009-07-30T19:30:14.250Z

The current directory should or should not be added to the environmental variable PATH by local initialization files as appropriate

AC-3

CM-6

CCE-6337-0

2009-07-30T19:30:14.267Z

DEPRECATED.

CCE-6289-3

2009-07-30T19:30:14.267Z

The system umask should be set appropriately

CM-6

CM-7

CCE-6451-9

2009-07-30T19:30:14.280Z

The user umask should be set appropriately

CM-6

CM-7

CCE-6042-6

2009-07-30T19:30:14.280Z

DEPRECATED.

CCE-5556-6

2009-07-30T19:30:14.297Z

/etc/rc.config.d/auditing file should be owned by an appropriate user

AC-3

CM-6

CCE-5887-5

2009-07-30T19:30:14.297Z

DEPRECATED.

CCE-5962-6

2009-07-30T19:30:14.297Z

/etc/init.d file should be owned by an appropriate user

AC-3

CM-6

CCE-6365-1

2009-07-30T19:30:14.313Z

/etc/hosts.lpd file should be owned by an appropriate user

AC-3

CM-6

CCE-6211-7

2009-07-30T19:30:14.327Z

DEPRECATED.

CCE-5491-6

2009-07-30T19:30:14.327Z

/etc/rc.config.d/auditing file should be owned by an appropriate group

AC-3

CM-6

CCE-6313-1

2009-07-30T19:30:14.343Z

DEPRECATED.

CCE-6159-8

2009-07-30T19:30:14.343Z

/etc/init.d file should be owned by an appropriate group

AC-3

CM-6

CCE-6065-7

2009-07-30T19:30:14.360Z

/etc/hosts.lpd file should be owned by an appropriate group

AC-3

CM-6

CCE-6251-3

2009-07-30T19:30:14.360Z

DEPRECATED.

CCE-6290-1

2009-07-30T19:30:14.360Z

/etc/rc.config.d/auditing file permissions should be set appropriately

AC-3

CM-6

CCE-6360-2

2009-07-30T19:30:14.377Z

DEPRECATED in favor of CCE-8638-9, CCE-8647-0, and CCE-8187-7.

CCE-8638-9

2009-07-30T19:30:14.377Z

/etc/auto.master file should be owned by an appropriate user

AC-3

CM-6

CCE-8647-0

2009-07-30T19:30:14.390Z

/etc/auto.misc file should be owned by an appropriate user

AC-3

CM-6

CCE-8187-7

2009-07-30T19:30:14.390Z

/etc/auto.net file should be owned by an appropriate user

AC-3

CM-6

CCE-5504-6

2009-07-30T19:30:14.407Z

/etc/init.d file permissions should be set appropriately

AC-3

CM-6

CCE-5517-8

2009-07-30T19:30:14.407Z

/etc/hosts.lpd file permissions should be set appropriately

AC-3

CM-6

CCE-6076-4

2009-07-30T19:30:14.407Z

DEPRECATED.

CCE-6292-7

2009-07-30T19:30:14.420Z

Auditing should be enabled or disabled for user accounts as appropriate

AU-2

CCE-6203-4

2009-07-30T19:30:14.420Z

Auditing should be enabled or disabled at boot time as appropriate

AU-2

CCE-5794-3

2009-07-30T19:30:14.437Z

System logons should be audited or not as appropriate

AU-2

CCE-6168-9

2009-07-30T19:30:14.437Z

System logoffs should be audited or not as appropriate

AU-2

CCE-6014-5

2009-07-30T19:30:14.453Z

Password changes should be audited or not as appropriate

AU-2

IA-5

CCE-5983-2

2009-07-30T19:30:14.453Z

su usage should be audited or not as appropriate

AU-2

CCE-5859-4

2009-07-30T19:30:14.467Z

Creation/modification of superuser groups should be audited or not as appropriate

AC-6

CM-6

CCE-6326-3

2009-07-30T19:30:14.467Z

Clearing of the audit log file should be audited or not as appropriate

AU-2

AU-3

CCE-5894-1

2009-07-30T19:30:14.467Z

Startup/shutdown of audit functions should be audited or not as appropriate

AU-2

CCE-6110-1

2009-07-30T19:30:14.483Z

Use of identification/authorization mechanisms should be audited or not as appropriate

AC-3

AU-2

IA-5

CCE-6423-8

2009-07-30T19:30:14.483Z

Remote access from outside the corporate network should be audited or not as appropriate

AC-1

AU-2

SC-7

CCE-6454-3

2009-07-30T19:30:14.500Z

Change of permissions/privileges should be audited or not as appropriate

AC-3

CM-6

CCE-6282-8

2009-07-30T19:30:14.500Z

Global initialization files should allow or deny write access to the terminal as appropriate

CM-7

CCE-6317-2

2009-07-30T19:30:14.517Z

PRI audit file should be specified appropriately

CM-6

CM-7

CCE-5660-6

2009-07-30T19:30:14.517Z

SEC audit file should be specified appropriately

AU-2

CCE-6348-7

2009-07-30T19:30:14.517Z

FileSpaceSwitch should be set to an appropriate value

CM-7

CCE-5774-5

2009-07-30T19:30:14.530Z

Wakeup switchpoint frequency should be set to an appropriate time interval

CM-6

CCE-5731-5

2009-07-30T19:30:14.530Z

Warning messages switchpoint distance should be set to an appropriate value

CM-6

CCE-6444-4

2009-07-30T19:30:14.547Z

Hard core dump size limits should be set appropriately

SC-5

CCE-5940-2

2009-07-30T19:30:14.547Z

Root logins should be allowed or not as appropriate from SSH consoles

AC-1

SC-7

CCE-4017-0

2009-07-30T19:30:14.563Z

2012-05-25T03:49:01.697Z

The "Security Zones: Use Only Machine Settings" setting should be configured correctly.

CM-2

CM-6

CCE-3924-8

2009-07-30T19:30:14.563Z

2012-05-25T03:49:01.837Z

Internet Explorer Processes (Restrict ActiveX Install)

CM-6

CCE-3929-7

2009-07-30T19:30:14.577Z

2012-05-25T03:49:01.960Z

The "Security Zones: Do Not Allow Users to Add/Delete Sites" setting should be configured correctly.

AC-3

AC-6

CM-5

CCE-3576-6

2009-07-30T19:30:14.577Z

2012-05-25T03:49:02.070Z

The "Disable Periodic Check For Internet Explorer Software Updates" setting should be configured correctly.

CM-6

SC-1

SI-2

CCE-4043-6

2009-07-30T19:30:14.593Z

2012-05-25T03:49:02.210Z

Internet Explorer Processes (Zone Elevation Protection)

CM-6

CCE-4047-7

2009-07-30T19:30:14.593Z

2012-05-25T03:49:02.353Z

The "Internet Explorer Processes (Consistent MIME Handling)" setting should be configured correctly.

CM-6

CCE-3941-2

2009-07-30T19:30:14.610Z

2012-05-25T03:49:02.477Z

The "Allow Software to Run or Install Even if the Signature is Invalid" setting should be configured correctly.

CM-5

SI-7

CCE-3338-1

2009-07-30T19:30:14.610Z

2012-05-25T03:49:02.603Z

The "Internet Explorer Processes (MK Protocol)" setting should be configured correctly.

CM-6

CCE-4118-6

2009-07-30T19:30:14.627Z

2012-05-25T03:49:02.743Z

The "Disable Software Update Shell Notifications on Program Launch" setting should be configured correctly.

CM-5

CM-6

CCE-4122-8

2009-07-30T19:30:14.627Z

2012-05-25T03:49:02.977Z

The "Internet Explorer Processes (Restrict File Download)" setting should be configured correctly.

CM-6

CCE-3518-8

2009-07-30T19:30:14.640Z

2012-05-25T03:49:03.087Z

The "Disable Automatic Install of Internet Explorer Components" setting should be configured correctly.

CM-5

SI-3

SI-7

SI-8

CCE-3201-1

2009-07-30T19:30:14.640Z

2012-05-25T03:49:03.243Z

The "Make Proxy Settings Per-Machine (Rather Then Per-User)" setting should be configured correctly.

CM-5

CCE-3744-0

2009-07-30T19:30:14.657Z

2012-05-25T03:49:03.353Z

The "Do Not Allow Users to enable or Disable Add-Ons" setting should be configured correctly.

CM-5

CM-7

CCE-3894-3

2009-07-30T19:30:14.670Z

2012-05-25T03:49:03.477Z

The "Turn Off Crash Detection" setting should be configured correctly.

CM-4

CCE-4162-4

2009-07-30T19:30:14.670Z

2012-05-25T03:49:03.633Z

The "Internet Explorer Processes (Scripted Window Security Restrictions)" setting should be configured correctly.

CM-6

CCE-3933-9

2009-07-30T19:30:14.687Z

2012-05-25T03:49:03.773Z

The "Security Zones: Do Not Allow Users to Change Policies" setting should be configured correctly.

AC-3

AC-6

CM-5

CCE-4149-1

2009-07-30T19:30:14.687Z

2012-05-25T03:49:03.883Z

The "Internet Explorer Processes (MIME Sniffing)" setting should be configured correctly.

CM-6

CCE-4026-1

2009-07-30T19:30:14.703Z

2012-05-25T03:49:03.993Z

The "Check for Signature on Downloaded Programs" setting should be configured correctly.

IA-5

SC-1

CCE-4171-5

2009-07-30T19:30:14.703Z

2012-05-25T03:49:04.180Z

The "Do Not Allow Resetting Internet Explorer Settings" setting should be configured correctly.

CM-5

CCE-4109-5

2009-07-30T19:30:14.717Z

2012-05-25T03:49:04.383Z

The "Allow cut, copy, or paste operations from the clipboard via script" setting should be configured correctly for the Internet Zone.

SI-3

CCE-3378-7

2009-07-30T19:30:14.717Z

2012-05-25T03:49:04.507Z

The "Turn Off First- Run Opt-In" setting should be configured correctly for the Internet Zone.

CM-6

CCE-4131-9

2009-07-30T19:30:14.733Z

2012-05-25T03:49:04.650Z

The "Web Browser Applications" setting should be configured correctly for the Internet Zone.

CM-6

CM-7

CCE-4013-9

2009-07-30T19:30:14.733Z

2012-05-25T03:49:04.993Z

The "Allow cut, copy, or paste operations from the clipboard via script" setting should be configured correctly for the Restricted Sites Zone.

SI-3

CCE-4153-3

2009-07-30T19:30:14.733Z

2012-05-25T03:49:05.150Z

The "Turn Off First- Run Opt-In" setting should be configured correctly for the Restricted Sites Zone.

CM-6

CCE-4052-7

2009-07-30T19:30:14.750Z

2012-05-25T03:49:05.307Z

The "Web Browser Applications" setting should be configured correctly for the Restricted Sites Zone.

CM-6

CM-7

CCE-4175-6

2009-07-30T19:30:14.767Z

2012-05-25T03:49:05.507Z

The "Intranet Sites: Include all network paths (UNCs)" setting should be configured correctly.

AC-4

CCE-3695-4

2009-07-30T19:30:14.767Z

2012-05-25T03:49:05.633Z

The "Disable the Advanced Page" setting should be configured correctly.

CM-5

CM-6

CCE-3777-0

2009-07-30T19:30:14.780Z

2012-05-25T03:49:05.727Z

The "Disable the Privacy Page" setting should be configured correctly.

CM-5

CM-6

CCE-3433-0

2009-07-30T19:30:14.780Z

2012-05-25T03:49:05.883Z

The "Disable the Security Page" setting should be configured correctly.

CM-5

CM-6

CCE-4199-6

2009-07-30T19:30:14.797Z

2012-05-25T03:49:06.070Z

The "Prevent Ignoing Certificate Errors" setting should be configured correctly.

SI-6

CCE-3204-5

2009-07-30T19:30:14.797Z

2012-05-25T03:49:06.197Z

The "Turn Off changing the URL to be displayed for checking updates to Internet Explorer and Internet Tools" setting should be configured correctly.

CM-6

CCE-4098-0

2009-07-30T19:30:14.813Z

2012-05-25T03:49:06.383Z

The "Turn Off Configuring the Update Check Interval (In Days)" setting should be configured correctly.

CM-6

SI-2

CCE-3741-6

2009-07-30T19:30:14.813Z

2012-05-25T03:49:06.493Z

The "Add-on List" setting should be configured correctly.

CM-6

CCE-3997-4

2009-07-30T19:30:14.827Z

2012-05-25T03:49:06.650Z

The "Deny all add-ons unless specifically allowed in the Add-on List" setting should be configured correctly.

CM-6

CM-7

SC-1

SI-3

CCE-4001-4

2009-07-30T19:30:14.843Z

2012-05-25T03:49:06.883Z

The "Disable "Configuring History"" setting should be configured correctly.

CM-6

CCE-4147-5

2009-07-30T19:30:14.843Z

2012-05-25T03:49:07.057Z

The "Disable Changing Automatic Configuration Settings" setting should be configured correctly.

CM-5

CCE-4059-2

2009-07-30T19:30:14.843Z

2012-05-25T03:49:07.163Z

The "Disable Changing Connection Settings" setting should be configured correctly.

CM-5

SC-7

CCE-3935-4

2009-07-30T19:30:14.860Z

2012-05-25T03:49:07.243Z

The "Disable Changing Proxy Settings" setting should be configured correctly.

CM-5

SC-7

CCE-3706-9

2009-07-30T19:30:14.860Z

2012-05-25T03:49:07.353Z

The "Disable Showing the Splash Screen" setting should be configured correctly.

CM-5

CM-6

CCE-3975-0

2009-07-30T19:30:14.877Z

2012-05-25T03:49:07.477Z

The "Prevent "Fix settings" Functionality" setting should be configured correctly.

CM-6

CM-7

CCE-3993-3

2009-07-30T19:30:14.877Z

2012-05-25T03:49:07.633Z

The "Prevent participation in the Customer Experience Improvement Programs" setting should be configured correctly.

AC-4

CCE-3207-8

2009-07-30T19:30:14.890Z

2012-05-25T03:49:07.820Z

The "Prevent performance of First Run Customize settings" setting should be configured correctly.

SI-3

CCE-4073-3

2009-07-30T19:30:14.890Z

2012-05-25T03:49:07.930Z

The "Prevent the deletation of temporary internet files and cookies" setting should be configured correctly.

AU-9

CM-6

CCE-3615-2

2009-07-30T19:30:14.907Z

2012-05-25T03:49:08.040Z

The "Turn off "Delete Browsing History" functionality" setting should be configured correctly.

AU-9

CM-6

CCE-3866-1

2009-07-30T19:30:14.907Z

2012-05-25T03:49:08.150Z

The "Turn off Managing Phishing Filter" setting should be configured correctly.

SC-1

SI-3

SI-8

CCE-3875-2

2009-07-30T19:30:14.920Z

2012-05-25T03:49:08.273Z

The "Turn off the Security Settings Check feature" setting should be configured correctly.

SI-6

CCE-4174-9

2009-07-30T19:30:14.920Z

2012-05-25T03:49:08.477Z

The "Allow Active Content from CD's to Run on User Machine" setting should be configured correctly.

CM-5

SI-7

CCE-4192-1

2009-07-30T19:30:14.937Z

2012-05-25T03:49:08.617Z

The "Enable third-party browser extensions" setting should be configured correctly.

CM-5

SI-3

CCE-3584-0

2009-07-30T19:30:14.937Z

2012-05-25T03:49:08.743Z

The "Automatically Check for Internet Explorer Updates" setting should be configured correctly.

CM-2

CM-6

CCE-3976-8

2009-07-30T19:30:14.953Z

2012-05-25T03:49:08.913Z

The "Check for Server Certificate Revocation" setting should be configured correctly.

IA-5

SC-1

CCE-3853-9

2009-07-30T19:30:14.953Z

2012-05-25T03:49:09.117Z

The "Access data sources across domains" setting should be configured correctly for the Internet Zone.

AC-4

CCE-3998-2

2009-07-30T19:30:14.953Z

2012-05-25T03:49:09.307Z

The "Drag and drop or copy and paste files" setting should be configured correctly for the Internet Zone.

SI-3

CCE-3888-5

2009-07-30T19:30:14.967Z

2012-05-25T03:49:09.413Z

The "Font download" setting should be configured correctly for the Internet Zone.

SI-3

CCE-3906-5

2009-07-30T19:30:14.967Z

2012-05-25T03:49:09.507Z

The "Installation of desktop items" setting should be configured correctly for the Internet Zone.

SI-3

CCE-4099-8

2009-07-30T19:30:14.983Z

2012-05-25T03:49:09.603Z

The "Allow script-initiated windows without size or position constraints" setting should be configured correctly for the Internet Zone.

SC-1

SI-3

CCE-3601-2

2009-07-30T19:30:14.983Z

2012-05-25T03:49:09.710Z

The "Allow Scriptlets" setting should be configured correctly for the Internet Zone.

SC-1

SI-3

CCE-3249-0

2009-07-30T19:30:15.000Z

2012-05-25T03:49:09.807Z

The "Allow status bar updates via script" setting should be configured correctly for the Internet Zone.

SC-8

SI-3

CCE-4139-2

2009-07-30T19:30:15.000Z

2012-05-25T03:49:09.900Z

The "Automatic prompting for file downloads" setting should be configured correctly for the Internet Zone.

SC-1

SI-3

CCE-3927-1

2009-07-30T19:30:15.017Z

2012-05-25T03:49:10.007Z

The "Download signed ActiveX controls" setting should be configured correctly for the Internet Zone.

SC-1

SI-3

CCE-3945-3

2009-07-30T19:30:15.017Z

2012-05-25T03:49:10.117Z

The "Download unsigned ActiveX controls" setting should be configured correctly for the Internet Zone.

SC-1

SI-3

CCE-4068-3

2009-07-30T19:30:15.030Z

2012-05-25T03:49:10.210Z

The "Initialize and script ActiveX controls not marked as safe for scripting" setting should be configured correctly for the Internet Zone.

SC-1

CCE-3963-6

2009-07-30T19:30:15.030Z

2012-05-25T03:49:10.320Z

The "Java permissions" setting should be configured correctly for the Internet Zone.

SC-1

CCE-4104-6

2009-07-30T19:30:15.047Z

2012-05-25T03:49:10.430Z

The "Launching programs and files in an IFRAME" setting should be configured correctly for the Internet Zone.

SC-1

SI-3

CCE-3623-6

2009-07-30T19:30:15.047Z

2012-05-25T03:49:10.540Z

The "Logon" setting should be configured correctly for the Internet Zone.

CM-6

IA-2

CCE-3751-5

2009-07-30T19:30:15.063Z

2012-05-25T03:49:10.680Z

The "Loose XAML" setting should be configured correctly for the Internet Zone.

CM-6

CCE-4143-4

2009-07-30T19:30:15.063Z

2012-05-25T03:49:10.807Z

The "Navigate sub-frames across different domains" setting should be configured correctly for the Internet Zone.

CM-6

CCE-4161-6

2009-07-30T19:30:15.077Z

2012-05-25T03:49:10.913Z

The "Open files based on content, not file extension" setting should be configured correctly for the Internet Zone.

CM-6

CCE-3553-5

2009-07-30T19:30:15.077Z

2012-05-25T03:49:11.040Z

The "Software channel permissions" setting should be configured correctly for the Internet Zone.

CM-5

CCE-3619-4

2009-07-30T19:30:15.093Z

2012-05-25T03:49:11.163Z

The "Use Pop-up Blocker" setting should be configured correctly for the Internet Zone.

SI-8

CCE-3914-9

2009-07-30T19:30:15.093Z

2012-05-25T03:49:11.273Z

The "Userdata persistence" setting should be configured correctly for the Internet Zone.

SC-4

CCE-3570-9

2009-07-30T19:30:15.110Z

2012-05-25T03:49:11.400Z

The "Web sites in less privileged Web content zones can navigate into this zone" setting should be configured correctly for the Internet Zone.

CM-6

CM-7

CCE-3843-0

2009-07-30T19:30:15.110Z

2012-05-25T03:49:11.493Z

The "XPS documents" setting should be configured correctly for the Internet Zone.

CM-6

CM-7

CCE-3984-2

2009-07-30T19:30:15.110Z

2012-05-25T03:49:11.587Z

The "Display mixed content" setting should be configured correctly for the Internet Zone.

AC-3

SC-1

CCE-3989-1

2009-07-30T19:30:15.127Z

2012-05-25T03:49:11.710Z

The "Display mixed content" setting should be configured correctly for the Intranet Zone.

AC-3

SC-1

CCE-4121-0

2009-07-30T19:30:15.127Z

2012-05-25T03:49:11.837Z

The "Display mixed content" setting should be configured correctly for the Locked Down Intranet Zone.

AC-3

SC-1

CCE-4138-4

2009-07-30T19:30:15.140Z

2012-05-25T03:49:11.977Z

The "Display mixed content" setting should be configured correctly for the Local Machine Zone.

AC-3

SC-1

CCE-4028-7

2009-07-30T19:30:15.140Z

2012-05-25T03:49:12.070Z

The "Display mixed content" setting should be configured correctly for the Locked Down Local Machine Zone.

AC-3

SC-1

CCE-3905-7

2009-07-30T19:30:15.157Z

2012-05-25T03:49:12.210Z

The "Access data sources across domains" setting should be configured correctly for the Restricted Sites Zone.

AC-4

CCE-4050-1

2009-07-30T19:30:15.157Z

2012-05-25T03:49:12.337Z

The "Active scripting" setting should be configured correctly for the Restricted Sites Zone.

SC-1

SI-3

CCE-4196-2

2009-07-30T19:30:15.170Z

2012-05-25T03:49:12.460Z

The "Binary and script behaviors" setting should be configured correctly for the Restricted Sites Zone.

SC-1

SI-3

CCE-3337-3

2009-07-30T19:30:15.170Z

2012-05-25T03:49:12.587Z

The "Drag and drop or copy and paste files" setting should be configured correctly for the Restricted Sites Zone.

SI-3

CCE-4150-9

2009-07-30T19:30:15.187Z

2012-05-25T03:49:12.697Z

The "File download" setting should be configured correctly for the Restricted Sites Zone.

SI-3

CCE-4062-6

2009-07-30T19:30:15.187Z

2012-05-25T03:49:12.837Z

The "Font download" setting should be configured correctly for the Restricted Sites Zone.

SI-3

CCE-4079-0

2009-07-30T19:30:15.203Z

2012-05-25T03:49:12.960Z

The "Installation of desktop items" setting should be configured correctly for the Restricted Sites Zone.

CM-6

CCE-4084-0

2009-07-30T19:30:15.203Z

2012-05-25T03:49:13.070Z

The "Allow META REFRESH" setting should be configured correctly for the Restricted Sites Zone.

CM-6

CCE-4119-4

2009-07-30T19:30:15.217Z

2012-05-25T03:49:13.197Z

The "Allow script-initiated windows without size or position constraints" setting should be configured correctly for the Restricted Sites Zone.

SC-1

SI-3

CCE-3639-2

2009-07-30T19:30:15.217Z

2012-05-25T03:49:13.273Z

The "Allow Scriptlets" setting should be configured correctly for the Restricted Sites Zone.

SC-1

SI-3

CCE-4031-1

2009-07-30T19:30:15.233Z

2012-05-25T03:49:13.447Z

The "Allow status bar updates via script" setting should be configured correctly for the Restricted Sites Zone.

SC-8

SI-3

CCE-4053-5

2009-07-30T19:30:15.233Z

2012-05-25T03:49:13.587Z

The "Automatic prompting for file downloads" setting should be configured correctly for the Restricted Sites Zone.

SC-1

SI-3

CCE-4057-6

2009-07-30T19:30:15.250Z

2012-05-25T03:49:13.743Z

The "Download signed ActiveX controls" setting should be configured correctly for the Restricted Sites Zone.

SC-1

SI-3

CCE-3564-2

2009-07-30T19:30:15.250Z

2012-05-25T03:49:13.883Z

The "Download unsigned ActiveX controls" setting should be configured correctly for the Restricted Sites Zone.

SC-1

SI-3

CCE-4101-2

2009-07-30T19:30:15.267Z

2012-05-25T03:49:14.023Z

The "Initialize and script ActiveX controls not marked as safe for scripting" setting should be configured correctly for the Restricted Sites Zone.

SC-1

CCE-3996-6

2009-07-30T19:30:15.267Z

2012-05-25T03:49:14.163Z

The "Java permissions" setting should be configured correctly for the Restricted Sites Zone.

SC-1

CCE-4066-7

2009-07-30T19:30:15.280Z

2012-05-25T03:49:14.320Z

The "Launching programs and files in an IFRAME" setting should be configured correctly for the Restricted Sites Zone.

SC-1

SI-3

CCE-3696-2

2009-07-30T19:30:15.280Z

2012-05-25T03:49:14.460Z

The "Logon" setting should be configured correctly for the Restricted Sites Zone.

CM-6

IA-2

CCE-3590-7

2009-07-30T19:30:15.297Z

2012-05-25T03:49:14.587Z

The "Loose XAML" setting should be configured correctly for the Restricted Sites Zone.

CM-6

CCE-4110-3

2009-07-30T19:30:15.297Z

2012-05-25T03:49:14.773Z

The "Navigate sub-frames across different domains" setting should be configured correctly for the Restricted Sites Zone.

CM-6

CCE-4132-7

2009-07-30T19:30:15.313Z

2012-05-25T03:49:14.900Z

The "Open files based on content, not file extension" setting should be configured correctly for the Restricted Sites Zone.

CM-6

CCE-3400-9

2009-07-30T19:30:15.327Z

2012-05-25T03:49:15.007Z

The "Run components not signed with Authenticode" setting should be configured correctly for the Restricted Sites Zone.

CM-5

CM-6

CCE-4158-2

2009-07-30T19:30:15.327Z

2012-05-25T03:49:15.227Z

The "Run components signed with Authenticode" setting should be configured correctly for the Restricted Sites Zone.

CM-5

CM-6

CCE-4163-2

2009-07-30T19:30:15.343Z

2012-05-25T03:49:15.367Z

The "Run ActiveX controls and plugins" setting should be configured correctly for the Restricted Sites Zone.

SC-1

CCE-4202-8

2009-07-30T19:30:15.343Z

2012-05-25T03:49:15.493Z

The "Script ActiveX controls marked safe for scripting" setting should be configured correctly for the Restricted Sites Zone.

SC-1

CCE-3216-9

2009-07-30T19:30:15.360Z

2012-05-25T03:49:15.680Z

The "Scripting of Java applets" setting should be configured correctly for the Restricted Sites Zone.

SC-1

CCE-3855-4

2009-07-30T19:30:15.360Z

2012-05-25T03:49:15.837Z

The "Software channel permissions" setting should be configured correctly for the Restricted Sites Zone.

CM-5

CCE-4018-8

2009-07-30T19:30:15.377Z

2012-05-25T03:49:16.163Z

The "Use Pop-up Blocker" setting should be configured correctly for the Restricted Sites Zone.

SI-8

CCE-4040-2

2009-07-30T19:30:15.377Z

2012-05-25T03:49:16.320Z

The "Userdata persistence" setting should be configured correctly for the Restricted Sites Zone.

SC-4

CCE-4215-0

2009-07-30T19:30:15.390Z

2012-05-25T03:49:16.507Z

The "Web sites in less privileged Web content zones can navigate into this zone" setting should be configured correctly for the Restricted Sites Zone.

CM-6

CM-7

CCE-3991-7

2009-07-30T19:30:15.390Z

2012-05-25T03:49:16.633Z

The "XPS documents" setting should be configured correctly for the Restricted Sites Zone.

CM-6

CM-7

CCE-3264-9

2009-07-30T19:30:15.407Z

2012-05-25T03:49:16.820Z

The "Display mixed content" setting should be configured correctly for the Restricted Sites Zone.

AC-3

SC-1

CCE-4087-3

2009-07-30T19:30:15.420Z

2012-05-25T03:49:16.977Z

The "Display mixed content" setting should be configured correctly for the Trusted Sites Zone.

AC-3

SC-1

CCE-4232-5

2009-07-30T19:30:15.420Z

2012-05-25T03:49:17.150Z

The "Display mixed content" setting should be configured correctly for the Locked Down Trusted Sites Zone.

AC-3

SC-1

CCE-4259-8

2009-07-30T19:30:15.437Z

2012-05-25T03:49:17.320Z

The "Enable Native XMLHttp Support" setting should be configured correctly.

SC-1

CCE-3647-5

2009-07-30T19:30:15.437Z

2012-05-25T03:49:17.400Z

The "Turn on the auto-complete feature for user names and passwords on form" setting should be configured correctly.

CM-6

IA-5

CCE-3677-2

2009-07-30T19:30:15.453Z

2012-03-17T03:30:35.093Z

The "Allow Install On Demand (Internet Explorer)" setting should be configured correctly.

CM-5

SI-7

CCE-4056-8

2009-07-30T19:30:15.453Z

2012-03-17T03:30:35.170Z

The "Turn off page transitions" setting should be configured correctly.

CM-6

CCE-4246-5

2009-07-30T19:30:15.467Z

2012-05-25T03:49:17.603Z

The "Disable AutoComplete for forms" setting should be configured correctly.

CM-5

CCE-4214-3

2009-07-30T19:30:15.467Z

2012-03-17T03:30:35.310Z

The "Disable Save this program to disk option" setting should be configured correctly.

CM-5

CM-6

CCE-3606-1

2009-07-30T19:30:15.483Z

2012-03-17T03:30:35.373Z

The "Disable changing certificate settings" setting should be configured correctly.

CM-5

CCE-4237-4

2009-07-30T19:30:15.500Z

2012-03-17T03:30:35.450Z

The "Disable external branding of Internet Explorer" setting should be configured correctly.

CM-6

CCE-3275-5

2009-07-30T19:30:15.500Z

2012-03-17T03:30:35.547Z

The "Configure Outlook Express" setting should be configured correctly

CM-6

CCE-4036-0

2009-07-30T19:30:15.517Z

2012-03-17T03:30:35.623Z

The "Turn on the Internet Connection Wizard Auto Detect" setting should be configured correctly.

CM-6

CCE-3825-7

2009-07-30T19:30:15.517Z

2012-03-17T03:30:35.700Z

The "Disable Internet Connection wizard" setting should be configured correctly.

CM-6

CCE-4226-7

2009-07-30T19:30:15.530Z

2012-03-17T03:30:35.780Z

The "Disable the Reset Web Settings feature" should be configured correctly.

CM-5

CM-6

CCE-4120-2

2009-07-30T19:30:15.530Z

The "Disable Downloading Of Site Subscription Content" setting should be configured correctly.

CM-6

CM-7

SC-1

SI-3

CCE-4248-1

2009-07-30T19:30:15.547Z

The "Disable Adding Schedules For Offline Pages" setting should be configured correctly.

CM-6

CCE-3389-4

2009-07-30T19:30:15.547Z

The "Disable Adding Channels" setting should be configured correctly.

CM-6

CCE-3645-9

2009-07-30T19:30:15.563Z

The "Disable Editing And Creating Of Schedule Groups" setting should be configured correctly.

CM-6

CM-7

CCE-3940-4

2009-07-30T19:30:15.563Z

The "Disable All Scheduled Offline Pages" setting should be configured correctly.

CM-6

CCE-3821-6

2009-07-30T19:30:15.577Z

The "Disable Editing Schedules For Offline Pages" setting should be configured correctly.

CM-6

CM-7

CCE-3742-4

2009-07-30T19:30:15.593Z

The "Disable Channel User Interface Completely" setting should be configured correctly.

CM-5

SC-7

CCE-4261-4

2009-07-30T19:30:15.593Z

The "Disable Removing Channels" setting should be configured correctly.

CM-5

CM-6

CCE-4190-5

2009-07-30T19:30:15.610Z

The "Disable Removing Schedules For Offline Pages" setting should be configured correctly.

CM-5

CM-6

CCE-4208-5

2009-07-30T19:30:15.610Z

The "Disable Offline Page Hit Logging" setting should be configured correctly.

CM-6

CCE-3754-9

2009-07-30T19:30:15.627Z

2012-05-25T03:49:19.663Z

The "Java permissions" setting should be configured correctly for the Locked Down Intranet Zone.

SC-1

CCE-3891-9

2009-07-30T19:30:15.627Z

2012-05-25T03:49:19.837Z

The "Java permissions" setting should be configured correctly for the Local Machine Zone.

SC-1

CCE-4160-8

2009-07-30T19:30:15.640Z

2012-05-25T03:49:20.040Z

The "Java permissions" setting should be configured correctly for the Locked Down Local Machine Zone.

SC-1

CCE-4763-9

2009-07-30T19:30:15.657Z

Computer-wide, rather than per-user, assignment of sites to zones for Internet Explorer should be enabled or disabled as appropriate.

AC-4

CCE-4643-3

2009-07-30T19:30:15.657Z

The "Turn on Protected Mode" setting should be configured correctly for the Internet Zone.

CM-6

CM-7

CCE-4652-4

2009-07-30T19:30:15.670Z

2012-05-25T03:49:20.290Z

The "Java permissions" setting should be configured correctly for the Intranet Zone.

SC-1

CCE-4793-6

2009-07-30T19:30:15.670Z

The "Download signed ActiveX controls" setting should be configured correctly for the Locked-Down Internet Zone.

SC-1

SI-3

CCE-4692-0

2009-07-30T19:30:15.687Z

2012-05-25T03:49:20.400Z

The "Java permissions" setting should be configured correctly for the Locked Down Internet Zone.

SC-1

CCE-3902-4

2009-07-30T19:30:15.703Z

2012-05-25T03:49:20.477Z

The "Java permissions" setting should be configured correctly for the Locked Down Restricted Sites Zone.

SC-1

CCE-4546-8

2009-07-30T19:30:15.717Z

The "Allow status bar updates via script" setting should be configured correctly for the Locked-Down Trusted Sites Zone.

SC-1

CCE-4564-1

2009-07-30T19:30:15.717Z

2012-05-25T03:49:20.603Z

The "Java permissions" setting should be configured correctly for the Locked Down Trusted Sites Zone.

SC-1

CCE-3909-9

2009-07-30T19:30:15.733Z

2012-05-25T03:49:20.663Z

The "Turn on Protected Mode" setting should be configured correctly for the Restricted Sites Zone.

CM-6

CM-7

CCE-4845-4

2009-07-30T19:30:15.733Z

2012-05-25T03:49:20.790Z

The "Java permissions" setting should be configured correctly for the Trusted Sites Zone.

SC-1

CCE-116-4

2009-07-30T19:30:15.750Z

2012-05-25T03:53:14.493Z

The "Disable VBA for Office applications" setting should be configured correctly.

CM-5

CM-6

CCE-908-4

2009-07-30T19:30:15.750Z

2012-05-25T03:53:14.603Z

The "ActiveX Control Initialization:" setting should be configured correctly.

CM-7

CCE-184-2

2009-07-30T19:30:15.767Z

The "Enable Customer Experience Improvement Program" setting should be configured correctly.

CM-5

CM-6

CCE-276-6

2009-07-30T19:30:15.767Z

2012-05-25T03:53:14.820Z

The "Enable Customer Experience Improvement Program" setting should be configured correctly.

CM-5

CM-6

CCE-967-0

2009-07-30T19:30:15.780Z

2012-05-25T03:53:15.007Z

The "Online content options" setting should be configured correctly.

CM-6

CCE-427-5

2009-07-30T19:30:15.780Z

2012-05-25T03:53:15.210Z

The "VBA Macro Warning Settings" setting should be configured correctly for Access 2007.

CM-6

CM-7

CCE-649-4

2009-07-30T19:30:15.797Z

2012-05-25T03:53:15.307Z

The "VBA Macro Warning Settings" setting should be configured correctly for Excel 2007.

CM-6

CM-7

CCE-862-3

2009-07-30T19:30:15.813Z

2012-05-25T03:53:15.413Z

The "Trust access to Visual Basic Project" setting should be configured correctly for Excel 2007 and 2003.

CM-6

CM-7

CCE-567-8

2009-07-30T19:30:15.813Z

2012-05-25T03:53:15.557Z

The "VBA Macro Warning Settings" setting should be configured correctly for PowerPoint 2007.

CM-6

CM-7

CCE-68-7

2009-07-30T19:30:15.827Z

2012-05-25T03:53:15.710Z

The "Trust access to Visual Basic Project" setting should be configured correctly for PowerPoint 2007.

CM-6

CM-7

CCE-537-1

2009-07-30T19:30:15.843Z

2010-04-28T04:00:00.000Z

The "Disable Remember Passwords" setting should be configured correctly for Outlook 2007.

AC-3

CM-6

CM-7

CCE-786-4

2009-07-30T19:30:15.843Z

2012-05-25T03:53:15.960Z

The "Configure Add-In Trust Level" setting should be configured correctly for Outlook 2007.

CM-6

CCE-937-3

2009-07-30T19:30:15.860Z

2010-04-28T04:00:00.000Z

DEPRECATED in favor of CCE-537-1.

CCE-13-3

2009-07-30T19:30:15.860Z

2012-05-25T03:53:16.197Z

The "Minimum encryption settings" setting should be configured correctly.

CM-7

SC-2

CCE-316-0

2009-07-30T19:30:15.877Z

2012-05-25T03:53:16.383Z

The "Do not check e-mail address against address of certificates being using" setting should be configured correctly.

CM-6

IA-5

CCE-14-1

2009-07-30T19:30:15.877Z

2012-05-25T03:53:16.587Z

The "Send all signed messages as clear signed messages" setting should be configured correctly.

CM-6

SC-9

CCE-153-7

2009-07-30T19:30:15.890Z

2012-05-25T03:53:16.757Z

The "Request an S/MIME receipt for all S/MIME signed messages" setting should be configured correctly.

CM-6

CM-7

CCE-345-9

2009-07-30T19:30:15.907Z

2012-05-25T03:53:16.883Z

The "Do not display 'Publish to GAL' button" setting should be configured correctly.

CM-6

CCE-700-5

2009-07-30T19:30:15.907Z

2012-05-25T03:53:16.977Z

The "Signature Warning" setting should be configured correctly.

CM-6

CM-7

CCE-695-7

2009-07-30T19:30:15.920Z

2012-05-25T03:53:17.070Z

The "Enable Cryptography Icons" setting should be configured correctly.

CM-6

CCE-395-4

2009-07-30T19:30:15.920Z

2012-05-25T03:53:17.150Z

The "Retrieving CRLs (Certificate Revocation Lists)" setting should be configured correctly.

CM-5

CM-6

IA-5

CCE-659-3

2009-07-30T19:30:15.937Z

2012-05-25T03:53:17.243Z

The "VBA Macro Warning Settings" setting should be configured correctly for Word 2007.

CM-6

CM-7

CCE-703-9

2009-07-30T19:30:15.937Z

2012-05-25T03:53:17.337Z

The "Trust access to Visual Basic Project" setting should be configured correctly for Word 2007 and 2003.

CM-6

CM-7

CCE-173-5

2009-07-30T19:30:15.953Z

2012-05-25T03:53:17.413Z

The "Warn before printing, saving or sending a file that contains tracked changes or comments" setting should be configured correctly.

CM-6

CM-7

CCE-784-9

2009-07-30T19:30:15.953Z

2012-05-25T03:53:17.507Z

The "Block updates from the Office Update Site from applying" setting should be configured correctly.

CM-7

SI-2

SI-3

CCE-1395-3

2009-07-30T19:30:15.967Z

2012-05-25T03:53:17.587Z

The "Underline hyperlinks" setting should be configured correctly for Access 2007.

CM-6

CM-7

SC-1

SI-3

CCE-1137-9

2009-07-30T19:30:15.967Z

2012-05-25T03:53:17.650Z

The "Number of documents in the Recent Documents list (0-9)" setting should be configured correctly for Access 2007.

AC-6

CM-6

CCE-1423-3

2009-07-30T19:30:15.983Z

2012-05-25T03:53:17.710Z

The "Disable Trust Bar Notification for unsigned application add-ins" setting should be configured correctly for Access 2007.

CM-5

CM-6

CCE-1238-5

2009-07-30T19:30:15.983Z

2012-05-25T03:53:17.773Z

The "Disable all application add-ins" setting should be configured correctly for Access 2007.

CM-6

SC-1

CCE-1476-1

2009-07-30T19:30:16.000Z

2012-05-25T03:53:17.837Z

The "Require that application add-ins are signed by Trusted Publisher" setting should be configured correctly for Access 2007.

CM-5

CM-6

CCE-1520-6

2009-07-30T19:30:16.017Z

2012-05-25T03:53:17.913Z

The "Disable all trusted locations" setting should be configured correctly for Access 2007.

CM-6

CCE-780-7

2009-07-30T19:30:16.017Z

2012-05-25T03:53:17.977Z

The "Allow Trusted Locations not on the computer" setting should be configured correctly for Access 2007.

CM-6

CCE-1214-6

2009-07-30T19:30:16.030Z

2012-05-25T03:53:18.057Z

The "Modal Trust Decision Only" setting should be configured correctly for Access 2007.

AC-3

CM-6

CCE-1370-6

2009-07-30T19:30:16.030Z

2012-05-25T03:53:18.117Z

The "Disable commands" setting should be configured correctly for Access 2007.

CM-6

CM-7

CCE-1268-2

2009-07-30T19:30:16.047Z

2012-05-25T03:53:18.210Z

The "Disable commands - Office Button | E-Mail" setting should be configured correctly for Access 2007.

CM-6

CM-7

CCE-1400-1

2009-07-30T19:30:16.047Z

2012-05-25T03:53:18.273Z

The "Disable commands - Office Button | Access Options | Customize | All Commands | Insert Hyperlink" setting should be configured correctly for Access 2007.

CM-6

CM-7

CCE-1440-7

2009-07-30T19:30:16.063Z

2012-05-25T03:53:18.337Z

The "Disable commands - Database Tools | Database Tools | Encrypt with Password" setting should be configured correctly for Access 2007.

CM-6

CM-7

SC-1

SI-3

CCE-581-9

2009-07-30T19:30:16.063Z

2012-05-25T03:53:18.400Z

The "Disable commands - Database Tools | Administer | Users and Permission | User and Group Permissions" setting should be configured correctly for Access 2007.

AC-6

CCE-1480-3

2009-07-30T19:30:16.077Z

2012-05-25T03:53:18.460Z

The "Disable commands - Database Tools | Administer | Users and Permissions | User and Group Accounts" setting should be configured correctly for Access 2007.

AC-6

CCE-1489-4

2009-07-30T19:30:16.077Z

2012-05-25T03:53:18.540Z

The "Disable commands - Database Tools | Administer | Users and Permission | User-Level Security Wizard..." setting should be configured correctly for Access 2007.

AC-6

CCE-1392-0

2009-07-30T19:30:16.093Z

2012-05-25T03:53:18.603Z

The "Disable commands - Database Tools | Database Tools | Encode/Decode Database" setting should be configured correctly for Access 2007.

CM-6

CM-7

SC-1

SI-3

CCE-1414-2

2009-07-30T19:30:16.093Z

2012-05-25T03:53:18.663Z

The "Disable commands - Database Tools | Macro | Visual Basic" setting should be configured correctly for Access 2007.

CM-6

CM-7

SC-1

SI-3

CCE-1418-3

2009-07-30T19:30:16.110Z

2012-05-25T03:53:18.743Z

The "Disable commands - Database Tools | Macro | Run Macro" setting should be configured correctly for Access 2007.

CM-6

CM-7

SC-1

SI-3

CCE-1405-0

2009-07-30T19:30:16.110Z

2012-05-25T03:53:18.853Z

The "Database Tools | Macro | Convert Macros to Visual Basic" setting should be configured correctly for Access 2007.

CM-6

CM-7

SC-1

SI-3

CCE-1550-3

2009-07-30T19:30:16.127Z

2012-05-25T03:53:18.930Z

The "Database Tools | Macro | Create Shortcut Menu from Macro" setting should be configured correctly for Access 2007.

CM-6

CM-7

SC-1

SI-3

CCE-1075-1

2009-07-30T19:30:16.127Z

2012-05-25T03:53:19.007Z

The "Disable shortcut keys" setting should be configured correctly for Access 2007.

CM-5

CM-6

CCE-709-6

2009-07-30T19:30:16.140Z

2012-05-25T03:53:19.087Z

The "Disable commands - Ctrl+K (Office Button | Access Options | Customize | All Commands | Insert Hyperlinks)" setting should be configured correctly for Access 2007.

CM-6

CM-7

SC-1

SI-3

CCE-1502-4

2009-07-30T19:30:16.140Z

2012-05-25T03:53:19.150Z

The "Disable commands - Alt+F11 (Database Tools | Macro | Visual Basic)" setting should be configured correctly for Access 2007.

CM-6

CM-7

SC-1

SI-3

CCE-1260-9

2009-07-30T19:30:16.157Z

2012-05-25T03:53:19.243Z

The "Default file format (Access 2007 | Access 2002-2003)" setting should be configured correctly for Access 2007.

CM-6

CM-7

CCE-1510-7

2009-07-30T19:30:16.157Z

2012-05-25T03:53:19.307Z

The "Do not prompt to convert older databases" setting should be configured correctly for Access 2007.

CM-6

CCE-1532-1

2009-07-30T19:30:16.170Z

2012-05-25T03:53:19.383Z

The "Internet and network paths as hyperlinks" setting should be configured correctly for Excel 2007.

CM-6

CCE-1039-7

2009-07-30T19:30:16.187Z

2012-05-25T03:53:19.460Z

The "Save Excel files as (Excel Workbook (*.xlsx) | Excel Macro-Enabled Workbook (*.xlsm) | Excel Binary Workbook (*.xlsb) | Web Page (*.htm; *.html) | Excel 97-2003 Workbook (*.xls) | Excel 5.0/95 Workbook (*.xls))" setting should be configured correctly for Excel 2007.

CM-6

CCE-1295-5

2009-07-30T19:30:16.187Z

2012-05-25T03:53:19.523Z

The "Disable AutoRepublish" setting should be configured correctly for Excel 2007.

CM-6

CCE-1334-2

2009-07-30T19:30:16.203Z

2012-05-25T03:53:19.603Z

The "AutoRepublish Warning Alert (Always show the alert before publishing | Never show the alert before publishing)" setting should be configured correctly for Excel 2007.

CM-6

CM-7

CCE-1308-6

2009-07-30T19:30:16.203Z

2012-05-25T03:53:19.663Z

The "Determine whether to force encrypted macros to be scanned in Microsoft Excel Open XML workbooks" setting should be configured correctly

CM-6

CM-7

SC-1

SI-3

CCE-616-3

2009-07-30T19:30:16.217Z

2012-05-25T03:53:19.743Z

The "Force file extension to match file type (Allow different | Allow different, but warn | Always match file type)" setting should be configured correctly for Excel 2007.

CM-6

CCE-1246-8

2009-07-30T19:30:16.217Z

2012-05-25T03:53:19.820Z

The "Store macro in Personal Macro Workbook by default" setting should be configured correctly

CM-6

CCE-1251-8

2009-07-30T19:30:16.233Z

2012-05-25T03:53:19.883Z

The "Disable all application add-ins" setting should be configured correctly for Excel 2007.

CM-6

SC-1

CCE-1524-8

2009-07-30T19:30:16.233Z

2012-05-25T03:53:19.960Z

The "Require that application add-ins are signed by Trusted Publisher" setting should be configured correctly for Excel 2007.

CM-5

CM-6

CCE-1422-5

2009-07-30T19:30:16.250Z

2012-05-25T03:53:20.040Z

The "Disable Trust Bar Notification for unsigned application add-ins" setting should be configured correctly for Excel 2007.

CM-5

CM-6

CCE-1444-9

2009-07-30T19:30:16.250Z

2012-05-25T03:53:20.103Z

The "Allow Trusted Locations not on the computer" setting should be configured correctly for Excel 2007.

CM-6

CCE-1449-8

2009-07-30T19:30:16.267Z

2012-05-25T03:53:20.180Z

The "Disable all trusted locations" setting should be configured correctly for Excel 2007.

CM-6

CCE-1471-2

2009-07-30T19:30:16.267Z

2012-05-25T03:53:20.257Z

The "Ignore other applications " setting should be configured correctly for Excel 2007.

CM-6

CCE-1119-7

2009-07-30T19:30:16.280Z

2012-05-25T03:53:20.320Z

The "Ask to update automatic links" setting should be configured correctly for Excel 2007.

CM-6

CM-7

CCE-1378-9

2009-07-30T19:30:16.280Z

2012-05-25T03:53:20.400Z

The "Number of documents in the Recent Documents list (0-17)" setting should be configured correctly for Excel 2007.

AC-6

CM-6

CCE-1277-3

2009-07-30T19:30:16.297Z

2012-05-25T03:53:20.460Z

The "Save any additional data necessary to maintain formulas" setting should be configured correctly for Excel 2007.

CM-6

CCE-1464-7

2009-07-30T19:30:16.297Z

2012-05-25T03:53:20.540Z

The "Load pictures from Web pages not created in Excel" setting should be configured correctly for Excel 2007.

CM-6

CCE-1094-2

2009-07-30T19:30:16.313Z

2012-05-25T03:53:20.603Z

The "Do not show data extraction options when opening corrupt workbooks" setting should be configured correctly for Excel 2007.

CM-6

CCE-1129-6

2009-07-30T19:30:16.327Z

2012-05-25T03:53:20.680Z

The "Assume structured storage format of workbook is intact when recovering data" setting should be configured correctly for Excel 2007.

CM-6

CM-7

CCE-1389-6

2009-07-30T19:30:16.327Z

2012-05-25T03:53:20.743Z

The "Corrupt formula conversion (Convert unrecoverable references to: values | #REF or #NAME)" setting should be configured correctly for Excel 2007.

CM-6

CM-7

CCE-1433-2

2009-07-30T19:30:16.343Z

2012-05-25T03:53:20.837Z

The "Connection File Locations" setting should be configured correctly for Excel 2007.

CM-6

CM-7

CCE-1323-5

2009-07-30T19:30:16.343Z

2012-05-25T03:53:20.900Z

The "Automatic Query Refresh (Prompt for all workbooks | Do not prompt; do not allow auto refresh | Do not prompt; allow auto refresh)" setting should be configured correctly for Excel 2007.

CM-6

CCE-1469-6

2009-07-30T19:30:16.360Z

2012-05-25T03:53:20.960Z

The "Disable commands" setting should be configured correctly for Excel 2007.

CM-6

CM-7

CCE-1473-8

2009-07-30T19:30:16.360Z

2012-05-25T03:53:21.023Z

The "Disable commands - Office Button | Excel Options | Customize | All Commands | Save as Web Page" setting should be configured correctly for Excel 2007.

CM-6

CM-7

CCE-1499-3

2009-07-30T19:30:16.377Z

2012-05-25T03:53:21.117Z

The "Disable commands - Office Button | Excel Options | Customize | All Commands | Web Page Preview" setting should be configured correctly for Excel 2007.

CM-6

CM-7

CCE-1024-9

2009-07-30T19:30:16.377Z

2012-05-25T03:53:21.197Z

The "Disable commands - Office Button | Send | Email" setting should be configured correctly for Excel 2007.

CM-6

CM-7

CCE-1530-5

2009-07-30T19:30:16.390Z

2012-05-25T03:53:21.290Z

The "Disable commands - Insert | Links | Hyperlink" setting should be configured correctly for Excel 2007.

CM-6

CM-7

CCE-1120-5

2009-07-30T19:30:16.390Z

2012-05-25T03:53:21.353Z

The "Disable commands - Review | Changes | Protect Sheet" setting should be configured correctly for Excel 2007.

CM-6

CM-7

CCE-1252-6

2009-07-30T19:30:16.407Z

2012-05-25T03:53:21.413Z

The "Disable commands - Review | Changes | Protect Workbook" setting should be configured correctly for Excel 2007.

CM-6

CM-7

CCE-1151-0

2009-07-30T19:30:16.407Z

2012-05-25T03:53:21.460Z

The "Disable commands - Review | Changes | Protect and Share Workbook" setting should be configured correctly for Excel 2007.

CM-6

CM-7

CCE-1301-1

2009-07-30T19:30:16.420Z

2012-05-25T03:53:21.523Z

The "Disable commands - View | Macros | Macros" setting should be configured correctly for Excel 2007.

CM-6

CM-7

CCE-1310-2

2009-07-30T19:30:16.420Z

2012-05-25T03:53:21.587Z

The "Disable commands - Developer | Code | Macros" setting should be configured correctly for Excel 2007.

CM-6

CM-7

SC-1

SI-3

CCE-1213-8

2009-07-30T19:30:16.437Z

2012-05-25T03:53:21.663Z

The "Disable commands - Developer | Code | Record Macro" setting should be configured correctly for Excel 2007.

CM-6

CM-7

SC-1

SI-3

CCE-1362-3

2009-07-30T19:30:16.453Z

2012-05-25T03:53:21.757Z

The "Disable commands - Developer | Code | Macro Security" setting should be configured correctly for Excel 2007.

CM-6

CM-7

SC-1

SI-3

CCE-1156-9

2009-07-30T19:30:16.453Z

2012-05-25T03:53:21.853Z

The "Disable commands - Developer | Code | Visual Basic" setting should be configured correctly for Excel 2007.

CM-6

CM-7

SC-1

SI-3

CCE-1429-0

2009-07-30T19:30:16.467Z

2012-05-25T03:53:21.913Z

The "Disable commands - Office Button | Excel Options | Customize | All Commands | Document Location" setting should be configured correctly for Excel 2007.

CM-6

CM-7

CCE-1182-5

2009-07-30T19:30:16.467Z

2012-05-25T03:53:21.977Z

The "Disable shortcut keys" setting should be configured correctly for Excel 2007.

CM-5

CM-6

CCE-1525-5

2009-07-30T19:30:16.483Z

2012-05-25T03:53:22.057Z

The "Disable shortcut keys - Ctrl+K (Insert | Links | Hyperlink)" setting should be configured correctly for Excel 2007.

CM-5

CM-6

CCE-1547-9

2009-07-30T19:30:16.500Z

2012-05-25T03:53:22.150Z

The "Disable shortcut keys - Alt+F8 (Developer | Code | Macros)" setting should be configured correctly for Excel 2007.

CM-5

CM-6

CCE-1300-3

2009-07-30T19:30:16.500Z

2012-05-25T03:53:22.290Z

The "Disable shortcut keys - Alt+F11 (Developer | Code | Visual Basic)" setting should be configured correctly for Excel 2007.

CM-5

CM-6

CCE-1331-8

2009-07-30T19:30:16.517Z

2012-05-25T03:53:22.430Z

The "Block opening of pre-release versions of file formats new to Excel 2007" setting should be configured correctly for Excel 2007.

CM-7

CCE-1468-8

2009-07-30T19:30:16.517Z

2012-05-25T03:53:22.557Z

The "Block opening of Open XML file types" setting should be configured correctly for Excel 2007.

CM-7

CCE-1490-2

2009-07-30T19:30:16.530Z

2012-05-25T03:53:22.633Z

The "Block opening of Binary 12 file types" setting should be configured correctly for Excel 2007.

CM-7

CCE-1512-3

2009-07-30T19:30:16.530Z

2012-05-25T03:53:22.680Z

The "Block opening of Binary file types" setting should be configured correctly for Excel 2007.

CM-7

CCE-1543-8

2009-07-30T19:30:16.547Z

2012-05-25T03:53:22.757Z

The "Block opening of Html and Xmlss files types" setting should be configured correctly for Excel 2007.

CM-7

CCE-1195-7

2009-07-30T19:30:16.547Z

2012-05-25T03:53:22.820Z

The "Block opening of Xml file types" setting should be configured correctly for Excel 2007.

CM-7

CCE-554-6

2009-07-30T19:30:16.563Z

2012-05-25T03:53:22.883Z

The "Block opening of DIF and SYLK file types" setting should be configured correctly for Excel 2007.

CM-7

CCE-1415-9

2009-07-30T19:30:16.563Z

2012-05-25T03:53:23.007Z

The "Block opening of Text file types" setting should be configured correctly for Excel 2007.

CM-7

CCE-1437-3

2009-07-30T19:30:16.577Z

2012-05-25T03:53:23.133Z

The "Block opening of Xll file type" setting should be configured correctly for Excel 2007.

CM-7

CCE-1446-4

2009-07-30T19:30:16.593Z

2012-05-25T03:53:23.290Z

The "Block saving of Open Xml file types" setting should be configured correctly for Excel 2007.

CM-7

CCE-1098-3

2009-07-30T19:30:16.593Z

2012-05-25T03:53:23.367Z

The "Block saving of Binary12 file types" setting should be configured correctly for Excel 2007.

CM-7

CCE-562-9

2009-07-30T19:30:16.610Z

2012-05-25T03:53:23.477Z

The "Block saving of Binary file types" setting should be configured correctly for Excel 2007.

CM-7

CCE-1507-3

2009-07-30T19:30:16.610Z

2012-05-25T03:53:23.557Z

The "Block saving of Html and Xmlss file types" setting should be configured correctly for Excel 2007.

CM-7

CCE-1406-8

2009-07-30T19:30:16.627Z

2012-05-25T03:53:23.617Z

The "Block saving Xml file types" setting should be configured correctly for Excel 2007.

CM-7

CCE-573-6

2009-07-30T19:30:16.627Z

2012-05-25T03:53:23.697Z

The "Block saving DIF and SYLK file types" setting should be configured correctly for Excel 2007.

CM-7

CCE-1336-7

2009-07-30T19:30:16.640Z

2012-05-25T03:53:23.790Z

The "Block saving of Text file types" setting should be configured correctly for Excel 2007.

CM-7

CCE-1230-2

2009-07-30T19:30:16.640Z

2012-05-25T03:53:23.853Z

The "Locally cache network file storages" setting should be configured correctly for Excel 2007.

CM-6

CCE-1375-5

2009-07-30T19:30:16.657Z

2012-05-25T03:53:23.930Z

The "Locally cache PivotTable reports" setting should be configured correctly for Excel 2007.

CM-6

CCE-1380-5

2009-07-30T19:30:16.670Z

2012-05-25T03:53:23.977Z

The "OLAP PivotTable User Defined Function (UDF) security setting (Allow ALL UDFs | Allow safe UDFs only | Allow NO UDFs)" setting should be configured correctly for Excel 2007.

CM-5

CM-6

SC-1

CCE-1376-3

2009-07-30T19:30:16.670Z

2012-05-25T03:53:24.040Z

The "Recognize SmartTags" setting should be configured correctly for Excel 2007.

CM-6

CCE-1398-7

2009-07-30T19:30:16.687Z

2012-05-25T03:53:24.103Z

The "Number of documents in the Recent Documents list (0 - 9)" setting should be configured correctly for InfoPath 2007.

AC-6

CM-6

CCE-569-4

2009-07-30T19:30:16.687Z

2012-05-25T03:53:24.180Z

The "Offline Mode status (Disabled | Enabled, InfoPath in Offline Mode | Enabled, InfoPath not in Offline Mode)" setting should be configured correctly for InfoPath 2007.

CM-6

CCE-1065-2

2009-07-30T19:30:16.703Z

2012-05-25T03:53:24.257Z

The "Disable commands" setting should be configured correctly for InfoPath 2007.

CM-6

CM-7

CCE-1361-5

2009-07-30T19:30:16.703Z

2012-05-25T03:53:24.320Z

The "Disable commands - File | Print" setting should be configured correctly for InfoPath 2007.

CM-6

CM-7

CCE-1096-7

2009-07-30T19:30:16.717Z

2012-05-25T03:53:24.400Z

The "Disable commands - File | Send to Mail Recipient" setting should be configured correctly for InfoPath 2007.

CM-6

CM-7

CCE-1391-2

2009-07-30T19:30:16.717Z

2012-05-25T03:53:24.460Z

The "Disable commands - File | Open from SharePoint Site" setting should be configured correctly for InfoPath 2007.

CM-6

CM-7

CCE-1519-8

2009-07-30T19:30:16.733Z

2012-05-25T03:53:24.557Z

The "Disable commands - File | Print Preview" setting should be configured correctly for InfoPath 2007.

CM-6

CM-7

CCE-1523-0

2009-07-30T19:30:16.733Z

2012-05-25T03:53:24.617Z

The "Disable commands - File | Page Setup" setting should be configured correctly for InfoPath 2007.

CM-6

CM-7

CCE-1171-8

2009-07-30T19:30:16.750Z

2012-05-25T03:53:24.757Z

The "Disable commands - Insert | Hyperlinks..." setting should be configured correctly for InfoPath 2007.

CM-6

CM-7

CCE-1457-1

2009-07-30T19:30:16.767Z

2012-05-25T03:53:24.883Z

The "Disable commands - Tools | Set Language" setting should be configured correctly for InfoPath 2007.

CM-6

CM-7

CCE-1426-6

2009-07-30T19:30:16.767Z

2012-05-25T03:53:24.947Z

The "Disable commands - Tools | Customize..." setting should be configured correctly for InfoPath 2007.

CM-6

CM-7

CCE-805-2

2009-07-30T19:30:16.780Z

2012-05-25T03:53:25.007Z

The "Disable commands - Tools | Options..." setting should be configured correctly for InfoPath 2007.

CM-6

CM-7

CCE-1453-0

2009-07-30T19:30:16.780Z

2012-05-25T03:53:25.070Z

The "Disable commands - Help | Microsoft Office Online" setting should be configured correctly for InfoPath 2007.

CM-6

CM-7

CCE-1351-6

2009-07-30T19:30:16.797Z

2012-05-25T03:53:25.150Z

The "Disable commands - Office Diagnostics" setting should be configured correctly for InfoPath 2007.

CM-6

CM-7

CCE-620-5

2009-07-30T19:30:16.797Z

2012-05-25T03:53:25.257Z

The "Disable commands - Help | Activate Product..." setting should be configured correctly for InfoPath 2007.

CM-6

CM-7

CCE-1017-3

2009-07-30T19:30:16.813Z

2012-05-25T03:53:25.400Z

The "Disable commands - Print Default" setting should be configured correctly for InfoPath 2007.

CM-6

CM-7

CCE-1021-5

2009-07-30T19:30:16.827Z

2012-05-25T03:53:25.523Z

The "Disable shortcut keys" setting should be configured correctly for InfoPath 2007.

CM-5

CM-6

CCE-1299-7

2009-07-30T19:30:16.827Z

2012-05-25T03:53:25.663Z

The "Disable shortcut keys - Print Shortcut (Ctrl+P)" setting should be configured correctly for InfoPath 2007.

CM-5

CM-6

CCE-1197-3

2009-07-30T19:30:16.843Z

2012-05-25T03:53:25.773Z

The "Disable shortcut keys - Insert Hyperlink Shortcut (Ctrl+K)" setting should be configured correctly for InfoPath 2007.

CM-5

CM-6

CCE-704-7

2009-07-30T19:30:16.843Z

2012-05-25T03:53:25.930Z

The "Control behavior for Windows SharePoint Services gradual upgrade (Allow redirections to any location | Allow redirections to Intranet only | Block all redirections)" setting should be configured correctly for InfoPath 2007.

CM-6

CM-7

CCE-1105-6

2009-07-30T19:30:16.860Z

2012-05-25T03:53:26.070Z

The "Disable opening of solutions from the Internet security zone" setting should be configured correctly for InfoPath 2007.

CM-6

CCE-761-7

2009-07-30T19:30:16.877Z

2012-05-25T03:53:26.367Z

The "Allow the use of ActiveX Custom Controls in InfoPath forms" setting should be configured correctly for InfoPath 2007.

CM-6

CCE-739-3

2009-07-30T19:30:16.877Z

2012-05-25T03:53:26.477Z

The "Run forms in restricted mode if they do not specify a publish location and use only features introduced before InfoPath 2003 SP1" setting should be configured correctly for InfoPath 2007.

CM-5

CM-6

CCE-1259-1

2009-07-30T19:30:16.890Z

2012-05-25T03:53:26.603Z

The "Allow file types as attachments to forms" setting should be configured correctly for InfoPath 2007.

CM-6

CCE-1267-4

2009-07-30T19:30:16.890Z

2012-05-25T03:53:26.680Z

The "Block specific file types as attachments to forms" setting should be configured correctly for InfoPath 2007.

CM-7

CCE-1060-3

2009-07-30T19:30:16.907Z

2012-05-25T03:53:26.757Z

The "Prevent users from allowing unsafe file types to be attached to forms" setting should be configured correctly for InfoPath 2007.

CM-6

CM-7

SC-1

SI-3

CCE-955-5

2009-07-30T19:30:16.907Z

2012-05-25T03:53:26.807Z

The "Display a warning that a form is digitally signed" setting should be configured correctly for InfoPath 2007.

CM-5

CM-6

CCE-1479-5

2009-07-30T19:30:16.920Z

2012-05-25T03:53:26.883Z

The "Control behavior when opening forms in the Internet security zone (Block | Prompt | Allow)" setting should be configured correctly for InfoPath 2007.

CM-6

CM-7

CCE-1360-7

2009-07-30T19:30:16.937Z

2012-05-25T03:53:27.040Z

The "Control behavior when opening forms in the Intranet security zone (Block | Prompt | Allow)" setting should be configured correctly for InfoPath 2007.

CM-6

CM-7

CCE-1386-2

2009-07-30T19:30:16.937Z

2012-05-25T03:53:27.180Z

The "Control behavior when opening forms in the Local Machine security zone (Block | Prompt | Allow)" setting should be configured correctly for InfoPath 2007.

CM-6

CM-7

CCE-893-8

2009-07-30T19:30:16.953Z

2012-05-25T03:53:27.337Z

The "Control behavior when opening forms in the Trusted Site security zone (Block | Prompt | Allow)" setting should be configured correctly for InfoPath 2007.

CM-6

CM-7

CCE-1290-6

2009-07-30T19:30:16.953Z

2012-05-25T03:53:27.493Z

The "Beaconing UI for forms opened in InfoPath (Never show beaconing UI | Always show beaconing UI | Show UI if Form Template is from Internet Zone)" setting should be configured correctly for InfoPath 2007.

CM-6

CCE-1381-3

2009-07-30T19:30:16.967Z

2012-05-25T03:53:27.680Z

The "Beaconing UI for forms opened in InfoPath Editor ActiveX (Never show beaconing UI | Always show beaconing UI | Show UI if Form Template is from Internet Zone)" setting should be configured correctly for InfoPath 2007.

CM-6

CCE-1135-3

2009-07-30T19:30:16.983Z

2012-05-25T03:53:27.837Z

The "Disable all application add-ins" setting should be configured correctly for InfoPath 2007.

CM-6

SC-1

CCE-1157-7

2009-07-30T19:30:16.983Z

2012-05-25T03:53:27.913Z

The "Require that application add-ins are signed by Trusted Publisher" setting should be configured correctly for InfoPath 2007.

CM-5

CM-6

CCE-1434-0

2009-07-30T19:30:17.000Z

2012-05-25T03:53:27.993Z

The "Disable Trust Bar Notification for unsigned application add-ins" setting should be configured correctly for InfoPath 2007.

CM-5

CM-6

CCE-1315-1

2009-07-30T19:30:17.000Z

2012-05-25T03:53:28.057Z

The "Control behavior when opening InfoPath e-mail forms containing code or script (Run without prompting | Prompt before running | Never run)" setting should be configured correctly for InfoPath 2007.

CM-6

CM-7

CCE-1210-4

2009-07-30T19:30:17.017Z

2012-05-25T03:53:28.117Z

The "Disable sending form template with e-mail forms" setting should be configured correctly for InfoPath 2007.

CM-5

CM-6

CCE-1236-9

2009-07-30T19:30:17.030Z

2012-05-25T03:53:28.197Z

The "Disable dynamic caching of the form template in InfoPath e-mail forms" setting should be configured correctly for InfoPath 2007.

CM-6

CM-7

CCE-884-7

2009-07-30T19:30:17.047Z

2012-05-25T03:53:28.320Z

The "Disable sending InfoPath 2003 Forms as e-mail forms" setting should be configured correctly for InfoPath 2007.

CM-5

CM-6

CCE-1518-0

2009-07-30T19:30:17.047Z

2012-05-25T03:53:28.477Z

The "Disable e-mail forms running in restricted security level" setting should be configured correctly for InfoPath 2007.

CM-6

CM-7

CCE-1170-0

2009-07-30T19:30:17.063Z

2012-05-25T03:53:28.633Z

The "Disable e-mail forms from the Internet security zone" setting should be configured correctly for InfoPath 2007.

CM-6

CM-7

CCE-1316-9

2009-07-30T19:30:17.063Z

2012-05-25T03:53:28.727Z

The "Disable e-mail forms from the Intranet security zone" setting should be configured correctly for InfoPath 2007.

CM-6

CM-7

CCE-1567-7

2009-07-30T19:30:17.077Z

2012-05-25T03:53:28.807Z

The "Disable e-mail forms from the Full Trust security zone" setting should be configured correctly for InfoPath 2007.

CM-6

CM-7

CCE-1265-8

2009-07-30T19:30:17.093Z

2012-05-25T03:53:28.867Z

The "Disable InfoPath e-mail forms in Outlook" setting should be configured correctly for InfoPath 2007.

CM-6

CCE-1538-8

2009-07-30T19:30:17.093Z

2012-05-25T03:53:28.930Z

The "Information Rights Management" setting should be configured correctly for InfoPath 2007.

AC-5

CM-6

CCE-1564-4

2009-07-30T19:30:17.110Z

2012-05-25T03:53:29.007Z

The "Custom code" setting should be configured correctly for InfoPath 2007.

CM-6

CM-7

CCE-1212-0

2009-07-30T19:30:17.110Z

2012-05-25T03:53:29.117Z

The "Email Forms Beaconing UI (Never show UI | Always show UI | Show UI if XSN is in Internet Zone)" setting should be configured correctly for InfoPath 2007.

CM-6

CCE-1344-1

2009-07-30T19:30:17.127Z

2012-05-25T03:53:29.273Z

The "Disable user customization of Quick Access Toolbar via UI" setting should be configured correctly

CM-5

CM-6

CCE-723-7

2009-07-30T19:30:17.140Z

2012-05-25T03:53:29.430Z

The "Disable user customization of Quick Access Toolbar via UI - Disallow in Word" setting should be configured correctly

CM-5

CM-6

CCE-1384-7

2009-07-30T19:30:17.140Z

2012-05-25T03:53:29.587Z

The "Disable user customization of Quick Access Toolbar via UI - Disallow in Excel" setting should be configured correctly

CM-5

CM-6

CCE-1159-3

2009-07-30T19:30:17.157Z

2012-05-25T03:53:29.743Z

The "Disable user customization of Quick Access Toolbar via UI - Disallow in PowerPoint" setting should be configured correctly

CM-5

CM-6

CCE-1146-0

2009-07-30T19:30:17.170Z

2012-05-25T03:53:29.807Z

The "Disable user customization of Quick Access Toolbar via UI - Disallow in Access" setting should be configured correctly

CM-5

CM-6

CCE-1542-0

2009-07-30T19:30:17.170Z

2012-05-25T03:53:29.883Z

The "Disable user customization of Quick Access Toolbar via UI - Disallow in Outlook" setting should be configured correctly

CM-5

CM-6

CCE-582-7

2009-07-30T19:30:17.187Z

2012-05-25T03:53:29.947Z

The "Disable all user customization of Quick Access Toolbar" setting should be configured correctly

CM-6

CCE-1291-4

2009-07-30T19:30:17.187Z

2012-05-25T03:53:30.007Z

The "Disable all user customization of Quick Access Toolbar - Disallow in Word" setting should be configured correctly

CM-6

CCE-1326-8

2009-07-30T19:30:17.203Z

2012-05-25T03:53:30.070Z

The "Disable all user customization of Quick Access Toolbar - Disallow in Excel" setting should be configured correctly

CM-6

CCE-1330-0

2009-07-30T19:30:17.203Z

2012-05-25T03:53:30.150Z

The "Disable all user customization of Quick Access Toolbar - Disallow in PowerPoint" setting should be configured correctly

CM-6

CCE-1335-9

2009-07-30T19:30:17.217Z

2012-05-25T03:53:30.210Z

The "Disable all user customization of Quick Access Toolbar - Disallow in Access" setting should be configured correctly

CM-6

CCE-1229-4

2009-07-30T19:30:17.233Z

2012-05-25T03:53:30.290Z

The "Disable all user customization of Quick Access Toolbar - Disallow in Outlook" setting should be configured correctly

CM-6

CCE-630-4

2009-07-30T19:30:17.233Z

2012-05-25T03:53:30.353Z

The "Disable UI extending from documents and templates" setting should be configured correctly

CM-5

CM-6

CCE-1154-4

2009-07-30T19:30:17.250Z

2012-05-25T03:53:30.413Z

The "Disable UI extending from documents and templates - Disallow in Word" setting should be configured correctly

CM-5

CM-6

CCE-1410-0

2009-07-30T19:30:17.250Z

2012-05-25T03:53:30.493Z

The "Disable UI extending from documents and templates - Disallow in Excel" setting should be configured correctly

CM-5

CM-6

CCE-1432-4

2009-07-30T19:30:17.267Z

2012-05-25T03:53:30.570Z

The "Disable UI extending from documents and templates - Disallow in PowerPoint" setting should be configured correctly

CM-5

CM-6

CCE-1198-1

2009-07-30T19:30:17.280Z

2012-05-25T03:53:30.633Z

The "Disable UI extending from documents and templates - Disallow in Access" setting should be configured correctly

CM-5

CM-6

CCE-929-0

2009-07-30T19:30:17.280Z

2012-05-25T03:53:30.697Z

The "Disable UI extending from documents and templates - Disallow in Outlook" setting should be configured correctly

CM-5

CM-6

CCE-1074-4

2009-07-30T19:30:17.297Z

2012-05-25T03:53:30.757Z

The "Recognize smart tags in Excel" setting should be configured correctly

CM-5

CM-6

CCE-1458-9

2009-07-30T19:30:17.297Z

2012-05-25T03:53:30.837Z

The "Disable Clip Art and Media downloads from the client and from Office Online website" setting should be configured correctly

CM-6

CM-7

SC-1

SI-3

CCE-1233-6

2009-07-30T19:30:17.313Z

2012-05-25T03:53:30.913Z

The "Disable template downloads from the client and from Office Online website" setting should be configured correctly

CM-6

SC-1

SI-2

CCE-1379-7

2009-07-30T19:30:17.313Z

2012-05-25T03:53:30.993Z

The "Disable access to updates, add-ins, and patches on the Office Online website" setting should be configured correctly

SC-8

SI-2

SI-3

CCE-1401-9

2009-07-30T19:30:17.327Z

2012-05-25T03:53:31.087Z

The "Prevents users from uploading document templates to the Office Online community." setting should be configured correctly

AC-2

CM-6

CCE-1528-9

2009-07-30T19:30:17.343Z

2012-05-25T03:53:31.163Z

The "Disable training practice downloads from the Office Online website" setting should be configured correctly

CM-5

CM-6

CCE-1533-9

2009-07-30T19:30:17.343Z

2012-05-25T03:53:31.243Z

The "Disable customer-submitted templates downloads from Office Online" setting should be configured correctly

CM-6

CM-7

SC-1

SI-3

CCE-646-0

2009-07-30T19:30:17.360Z

2012-05-25T03:53:31.307Z

The "Open Office documents as read/write while browsing" setting should be configured correctly

CM-6

CCE-1438-1

2009-07-30T19:30:17.360Z

2012-05-25T03:53:31.383Z

The "Rely on VML for displaying graphics in browsers" setting should be configured correctly

CM-6

CM-7

SC-1

SI-3

CCE-711-2

2009-07-30T19:30:17.377Z

2012-05-25T03:53:31.447Z

The "Allow PNG as an output format" setting should be configured correctly

CM-6

CCE-1292-2

2009-07-30T19:30:17.390Z

2012-05-25T03:53:31.523Z

The "Improve Proofing Tools" setting should be configured correctly

CM-6

CCE-1615-4

2009-07-30T19:30:17.390Z

2012-05-25T03:53:31.603Z

The "Disable Opt-in Wizard on first run" setting should be configured correctly.

CM-6

CCE-1191-6

2009-07-30T19:30:17.407Z

2012-05-25T03:53:31.663Z

The "Microsoft Office Online" setting should be configured correctly

CM-6

CCE-1587-5

2009-07-30T19:30:17.407Z

2012-05-25T03:53:31.727Z

The "Disable Password Caching" setting should be configured correctly

AC-3

CM-6

CM-7

CCE-1486-0

2009-07-30T19:30:17.420Z

2012-05-25T03:53:31.807Z

The "Disable all Trust Bar notifications for security issues" setting should be configured correctly

CM-6

CCE-1508-1

2009-07-30T19:30:17.420Z

2012-05-25T03:53:31.883Z

The "Protect document metadata for rights managed Office Open XML Files" setting should be configured correctly

CM-6

CM-7

CCE-1640-2

2009-07-30T19:30:17.437Z

2012-05-25T03:53:31.960Z

The "Protect document metadata for password protected files." setting should be configured correctly

SC-7

CCE-1539-6

2009-07-30T19:30:17.453Z

2012-05-25T03:53:32.040Z

The "Encryption type for password protected Office Open XML files" setting should be configured correctly

CM-6

SC-2

CCE-1561-0

2009-07-30T19:30:17.467Z

2012-05-25T03:53:32.117Z

The "Encryption type for password protected Office 97-2003 files" setting should be configured correctly

CM-6

SC-2

CCE-1068-6

2009-07-30T19:30:17.467Z

2012-05-25T03:53:32.210Z

The "Load Controls in Forms3 (1 | 2 | 3 | 4)" setting should be configured correctly

CM-6

CCE-1574-3

2009-07-30T19:30:17.483Z

2012-05-25T03:53:32.320Z

The "Automation Security (Disable macros by default | Use application macro security level | Macros enabled)" setting should be configured correctly

CM-6

CM-7

CCE-1239-3

2009-07-30T19:30:17.483Z

2012-05-25T03:53:32.430Z

The "Prevent Word and Excel from loading managed code extensions" setting should be configured correctly

AC-3

SC-1

SI-3

CCE-1623-8

2009-07-30T19:30:17.500Z

2012-05-25T03:53:32.507Z

The "Disable hyperlink warnings" setting should be configured correctly

CM-6

CM-7

CCE-1083-5

2009-07-30T19:30:17.517Z

2012-05-25T03:53:32.587Z

The "Disable password to open UI" setting should be configured correctly

AC-3

CM-6

CM-7

CCE-1343-3

2009-07-30T19:30:17.517Z

2012-05-25T03:53:32.663Z

The "Download Office Controls" setting should be configured correctly

CM-5

CM-6

CCE-1242-7

2009-07-30T19:30:17.530Z

2012-05-25T03:53:32.727Z

The "Disable All ActiveX" setting should be configured correctly

CM-6

SC-1

CCE-770-8

2009-07-30T19:30:17.530Z

2012-05-25T03:53:32.807Z

The "Allow mix of policy and user locations" setting should be configured correctly

CM-6

CCE-903-5

2009-07-30T19:30:17.547Z

2012-05-25T03:53:32.867Z

The "Disable Smart Document's use of manifests" setting should be configured correctly

CM-5

CM-6

CCE-1555-2

2009-07-30T19:30:17.563Z

2012-05-25T03:53:32.930Z

The "Completely disable the Smart Documents feature in Word and Excel" setting should be configured correctly

CM-6

CCE-1061-1

2009-07-30T19:30:17.563Z

2012-05-25T03:53:32.993Z

The "Disable Internet Fax feature" setting should be configured correctly

CM-6

CCE-1603-0

2009-07-30T19:30:17.577Z

2012-05-25T03:53:33.070Z

The "Prevent users from changing permissions on rights managed content" setting should be configured correctly

AC-3

CM-6

CCE-1612-1

2009-07-30T19:30:17.577Z

2012-05-25T03:53:33.133Z

The "Allow users with earlier versions of Office to read with browsers..." setting should be configured correctly

CM-6

CCE-1493-6

2009-07-30T19:30:17.593Z

2012-05-25T03:53:33.210Z

The "Always require users to connect to verify permission" setting should be configured correctly

IA-2

CCE-1409-2

2009-07-30T19:30:17.610Z

2012-05-25T03:53:33.290Z

The "Always expand groups in Office when restricting permission for documents" setting should be configured correctly

CM-6

CCE-1589-1

2009-07-30T19:30:17.610Z

2012-05-25T03:53:33.367Z

The "Never allow users to specify groups when restricting permission for documents" setting should be configured correctly

AC-3

CM-6

CCE-1237-7

2009-07-30T19:30:17.627Z

2012-05-25T03:53:33.460Z

The "Disable Microsoft Passport service for content with restricted permission" setting should be configured correctly

CM-6

CCE-1404-3

2009-07-30T19:30:17.627Z

2012-05-25T03:53:33.587Z

The "Do not allow users to upgrade Information Rights Management configuration" setting should be configured correctly

CM-5

CM-7

CCE-1396-1

2009-07-30T19:30:17.640Z

2012-05-25T03:53:33.727Z

The "Key Usage Filtering" setting should be configured correctly

CM-6

CCE-1167-6

2009-07-30T19:30:17.657Z

2012-05-25T03:53:33.790Z

The "EKU filtering" setting should be configured correctly

CM-6

CCE-1585-9

2009-07-30T19:30:17.657Z

2012-05-25T03:53:33.853Z

The "Legacy format signatures" setting should be configured correctly

AC-3

CM-6

CM-7

SC-5

CCE-1572-7

2009-07-30T19:30:17.670Z

2012-05-25T03:53:33.913Z

The "Suppress Office Signing Providers (Enable Western and East Asian | Suppress default Western | Suppress default East Asian | Suppress both Western and East Asian)" setting should be configured correctly

CM-6

CCE-1220-3

2009-07-30T19:30:17.687Z

2012-05-25T03:53:33.993Z

The "Suppress external signature services menu item" setting should be configured correctly

AC-3

SC-1

SI-3

CCE-1634-5

2009-07-30T19:30:17.687Z

2012-05-25T03:53:34.070Z

The "Disable Check For Solutions" setting should be configured correctly

CM-6

CM-7

SC-1

SI-3

CCE-1643-6

2009-07-30T19:30:17.703Z

2012-05-25T03:53:34.180Z

The "Disable inclusion of document properties in PDF and XPS output" setting should be configured correctly

CM-6

CM-7

CCE-1546-1

2009-07-30T19:30:17.703Z

2012-05-25T03:53:34.290Z

The "Disable Document Information Panel" setting should be configured correctly

CM-6

CM-7

CCE-1505-7

2009-07-30T19:30:17.717Z

2012-05-25T03:53:34.400Z

The "Document Information Panel Beaconing UI (Never show UI | Always show UI | Show UI if XSN is in Internet Zone)" setting should be configured correctly

CM-6

CCE-1545-3

2009-07-30T19:30:17.733Z

2012-05-25T03:53:34.523Z

The "Disable the Office client from polling the Office server for published links" setting should be configured correctly

CM-5

CM-6

CCE-1549-5

2009-07-30T19:30:17.733Z

2012-05-25T03:53:34.913Z

The "Block opening of pre-release versions of file formats new to Word 2007 through the Compatibility Pack for the 2007 Office system and Word 2007 Open XML/Word 97-2003 Format Converter" setting should be configured correctly

CM-7

CCE-1431-6

2009-07-30T19:30:17.750Z

2012-05-25T03:53:34.993Z

The "Block opening of pre-release versions of file formats new to Excel 2007 through the Compatibility Pack for the 2007 Office system and Excel 2007 Converter" setting should be configured correctly

CM-7

CCE-1594-1

2009-07-30T19:30:17.767Z

2012-05-25T03:53:35.070Z

The "Block opening of pre-release versions of file formats new to PowerPoint 2007 through the Compatibility Pack for the 2007 Office system and PowerPoint 2007 Converter" setting should be configured correctly

CM-7

CCE-1241-9

2009-07-30T19:30:17.767Z

2012-05-25T03:53:35.133Z

The "Control Blogging (Enabled | Only SharePoint blogs allowed | All blogging disabled)" setting should be configured correctly

CM-6

CM-7

CCE-1607-1

2009-07-30T19:30:17.780Z

2012-05-25T03:53:35.180Z

The "Enable Smart Resume" setting should be configured correctly

CM-6

CCE-752-6

2009-07-30T19:30:17.780Z

2012-05-25T03:53:35.257Z

The "Do not upload media files" setting should be configured correctly

CM-6

CM-7

CCE-1166-8

2009-07-30T19:30:17.797Z

2012-05-25T03:53:35.413Z

The "Disable hyperlinks to web templates in File | New and task panes" setting should be configured correctly

CM-6

CM-7

SC-1

SI-3

CCE-654-4

2009-07-30T19:30:17.813Z

2012-05-25T03:53:35.523Z

The "Prevent access to Web-based file storage" setting should be configured correctly

CM-6

CM-7

CCE-1192-4

2009-07-30T19:30:17.813Z

2012-05-25T03:53:35.680Z

The "Do not allow attachment previewing in Outlook" setting should be configured correctly for Outlook 2007.

AC-3

SC-1

CCE-791-4

2009-07-30T19:30:17.827Z

2012-05-25T03:53:35.790Z

The "Read e-mail as plain text" setting should be configured correctly for Outlook 2007.

CM-6

CM-7

CCE-1456-3

2009-07-30T19:30:17.827Z

2012-05-25T03:53:35.867Z

The "Read signed e-mail as plain text" setting should be configured correctly for Outlook 2007.

CM-6

CM-7

SC-1

SI-3

CCE-1478-7

2009-07-30T19:30:17.843Z

2012-05-25T03:53:35.947Z

The "Prevent publishing to Office Online" setting should be configured correctly for Outlook 2007.

AC-2

CM-6

CCE-1368-0

2009-07-30T19:30:17.860Z

2012-05-25T03:53:36.007Z

The "Prevent publishing to a DAV server" setting should be configured correctly for Outlook 2007.

CM-5

CM-6

CCE-1641-0

2009-07-30T19:30:17.860Z

2012-05-25T03:53:36.117Z

The "Restrict level of calendar details users can publish (All options are available | Disables 'Full details' | Disables 'Full details' and 'Limited details')" setting should be configured correctly for Outlook 2007.

CM-6

CCE-1266-6

2009-07-30T19:30:17.877Z

2012-05-25T03:53:36.197Z

The "Access to published calendars" setting should be configured correctly for Outlook 2007.

AC-3

CM-6

CCE-1399-5

2009-07-30T19:30:17.877Z

2012-05-25T03:53:36.273Z

The "Restrict upload method" setting should be configured correctly for Outlook 2007.

CM-6

CCE-1187-4

2009-07-30T19:30:17.890Z

2012-05-25T03:53:36.337Z

The "Hide Junk Mail UI" setting should be configured correctly for Outlook 2007.

SC-1

SI-3

SI-8

CCE-1588-3

2009-07-30T19:30:17.907Z

2012-05-25T03:53:36.400Z

The "Junk E-mail protection level (No Protection, Low, High, Trusted Lists Only)" setting should be configured correctly for Outlook 2007.

SC-1

CCE-1117-1

2009-07-30T19:30:17.907Z

2012-05-25T03:53:36.477Z

The "Trust E-mail from Contacts" setting should be configured correctly for Outlook 2007.

SI-3

CCE-1130-4

2009-07-30T19:30:17.920Z

2012-05-25T03:53:36.587Z

The "Add e-mail recipients to users' Safe Senders Lists" setting should be configured correctly for Outlook 2007.

SI-3

SI-8

CCE-1093-4

2009-07-30T19:30:17.920Z

2012-05-25T03:53:36.680Z

The "Dial-up options" setting should be configured correctly for Outlook 2007.

AC-1

CM-6

SC-7

CCE-1599-0

2009-07-30T19:30:17.937Z

2012-05-25T03:53:36.790Z

The "Dial-up options - Warn before switching dial-up connection" setting should be configured correctly for Outlook 2007.

AC-1

CM-6

SC-7

CCE-1621-2

2009-07-30T19:30:17.953Z

2012-05-25T03:53:36.913Z

The "Dial-up options - Hang up when finished sending, receiving, or updating" setting should be configured correctly for Outlook 2007.

AC-1

CM-6

SC-7

CCE-1269-0

2009-07-30T19:30:17.967Z

2012-05-25T03:53:37.057Z

The "Dial-up options - Automatically dial during a background Send/Receive" setting should be configured correctly for Outlook 2007.

AC-1

CM-6

SC-7

CCE-1419-1

2009-07-30T19:30:17.967Z

2012-05-25T03:53:37.180Z

The "Do not allow creating, replying, or forwarding signatures for e-mail messages" setting should be configured correctly for Outlook 2007.

CM-6

CCE-1551-1

2009-07-30T19:30:17.983Z

2012-05-25T03:53:37.307Z

The "Send copy of pictures with HTML messages instead of reference to Internet location" setting should be configured correctly for Outlook 2007.

CM-6

CCE-655-1

2009-07-30T19:30:18.000Z

2012-05-25T03:53:37.477Z

The "Outlook Rich Text options (Convert to HTML | Convert to Plain Text format | Send Using Outlook Rich Text format)" setting should be configured correctly for Outlook 2007.

CM-6

CM-7

CCE-1592-5

2009-07-30T19:30:18.017Z

2012-05-25T03:53:37.557Z

The "Plain text options" setting should be configured correctly for Outlook 2007.

CM-6

SI-3

CCE-1614-7

2009-07-30T19:30:18.030Z

2012-05-25T03:53:37.617Z

The "Plain text options - Encode attachments in UUENCODE format when sending a plain text message" setting should be configured correctly for Outlook 2007.

CM-6

SI-3

CCE-1526-3

2009-07-30T19:30:18.047Z

2012-05-25T03:53:37.697Z

The "Set message format (HTML | Rich Text | Plain Text)" setting should be configured correctly for Outlook 2007.

CM-6

SI-3

CCE-1111-4

2009-07-30T19:30:18.047Z

2012-05-25T03:53:37.757Z

The "Make Outlook the default program for E-mail, Contacts, and Calendar" setting should be configured correctly for Outlook 2007.

CM-6

CCE-1494-4

2009-07-30T19:30:18.063Z

2012-05-25T03:53:37.820Z

The "Do not allow folders in non-default stores to be set as folder home pages" setting should be configured correctly for Outlook 2007.

CM-6

CCE-1287-2

2009-07-30T19:30:18.077Z

2012-05-25T03:53:37.900Z

The "Use Unicode format when dragging e-mail message to file system" setting should be configured correctly for Outlook 2007.

CM-6

CCE-1529-7

2009-07-30T19:30:18.077Z

2012-05-25T03:53:37.960Z

The "Do not allow Outlook object model scripts to run for shared folders" setting should be configured correctly for Outlook 2007.

CM-6

CCE-1560-2

2009-07-30T19:30:18.093Z

2012-05-25T03:53:38.057Z

The "Do not allow Outlook object model scripts to run for public folders" setting should be configured correctly for Outlook 2007.

CM-6

CCE-1596-6

2009-07-30T19:30:18.110Z

2012-05-25T03:53:38.117Z

The "Set maximum level of online status on a person name (Do not allow | Allow everywhere except To and CC field | Allow everywhere)" setting should be configured correctly for Outlook 2007.

CM-6

CM-7

CCE-1604-8

2009-07-30T19:30:18.127Z

2012-05-25T03:53:38.243Z

The "Display online status on a person name (Never | Everywhere except To and CC field | Everywhere)" setting should be configured correctly for Outlook 2007.

AC-3

CM-6

CCE-1648-5

2009-07-30T19:30:18.127Z

2012-05-25T03:53:38.400Z

The "Turn off Enable the Person Names Smart Tag option" setting should be configured correctly for Outlook 2007.

CM-6

CCE-1516-4

2009-07-30T19:30:18.140Z

2012-05-25T03:53:38.557Z

The "Outlook Security Mode (Outlook Default Security | Use Security Form from 'Outlook Security Settings' Public Folder | Use Security Form from 'Outlook 10 Security Settings' Public Folder | Use Outlook Security Group Policy)" setting should be configured correctly for Outlook 2007.

CM-6

CCE-1296-3

2009-07-30T19:30:18.157Z

2012-05-25T03:53:38.633Z

The "Display Level 1 attachments" setting should be configured correctly for Outlook 2007.

CM-5

CM-6

CCE-1388-8

2009-07-30T19:30:18.157Z

2012-05-25T03:53:38.710Z

The "Allow users to demote attachments to Level 2" setting should be configured correctly for Outlook 2007.

CM-6

CCE-1652-7

2009-07-30T19:30:18.170Z

2012-05-25T03:53:38.773Z

The "Do not prompt about Level 1 attachments when sending an item" setting should be configured correctly for Outlook 2007.

CM-6

CCE-1569-3

2009-07-30T19:30:18.187Z

2012-05-25T03:53:38.837Z

The "Do not prompt about Level 1 attachments when closing an item" setting should be configured correctly for Outlook 2007.

CM-6

CCE-1459-7

2009-07-30T19:30:18.187Z

2012-05-25T03:53:38.930Z

The "Allow in-place activation of embedded OLE objects" setting should be configured correctly for Outlook 2007.

CM-6

CCE-1608-9

2009-07-30T19:30:18.203Z

2012-05-25T03:53:39.070Z

The "Display OLE package objects" setting should be configured correctly for Outlook 2007.

CM-6

CCE-1617-0

2009-07-30T19:30:18.217Z

2012-05-25T03:53:39.210Z

The "Add file extensions to block as Level 1" setting should be configured correctly for Outlook 2007.

SI-3

SI-8

CCE-1631-1

2009-07-30T19:30:18.233Z

2012-05-25T03:53:39.367Z

The "Remove file extensions blocked as Level 1" setting should be configured correctly for Outlook 2007.

CM-6

CM-7

CCE-1155-1

2009-07-30T19:30:18.233Z

2012-05-25T03:53:39.523Z

The "Add file extensions to block as Level 2" setting should be configured correctly for Outlook 2007.

SI-3

SI-8

CCE-1556-0

2009-07-30T19:30:18.250Z

2012-05-25T03:53:39.663Z

The "Remove file extensions blocked as Level 2" setting should be configured correctly for Outlook 2007.

CM-6

CM-7

CCE-1595-8

2009-07-30T19:30:18.267Z

2012-05-25T03:53:39.743Z

The "Allow scripts in one-off Outlook forms" setting should be configured correctly for Outlook 2007.

SC-1

SI-3

CCE-1436-5

2009-07-30T19:30:18.267Z

2012-05-25T03:53:39.807Z

The "Set Outlook object model Custom Actions execution prompt (Prompt User | Automatically Approve | Automatically Deny | Prompt user based on computer security)" setting should be configured correctly for Outlook 2007.

CM-6

CM-7

SC-1

SI-3

CCE-1586-7

2009-07-30T19:30:18.280Z

2012-05-25T03:53:39.867Z

The "Set control ItemProperty prompt (Prompt User | Automatically Approve | Automatically Deny | Prompt user based on computer security)" setting should be configured correctly

CM-6

CCE-1590-9

2009-07-30T19:30:18.297Z

2012-05-25T03:53:39.947Z

The "Configure Outlook object model prompt when sending mail (Prompt User | Automatically Approve | Automatically Deny | Prompt user based on computer security)" setting should be configured correctly for Outlook 2007.

CM-6

CM-7

CCE-1004-1

2009-07-30T19:30:18.297Z

2012-05-25T03:53:40.007Z

The "Configure Outlook object model prompt when accessing an address book (Prompt User | Automatically Approve | Automatically Deny | Prompt user based on computer security)" setting should be configured correctly for Outlook 2007.

CM-6

CM-7

CCE-1273-2

2009-07-30T19:30:18.313Z

2012-05-25T03:53:40.087Z

The "Configure Outlook object model prompt when reading address information (Prompt User | Automatically Approve | Automatically Deny | Prompt user based on computer security)" setting should be configured correctly for Outlook 2007.

CM-6

CM-7

CCE-1172-6

2009-07-30T19:30:18.327Z

2012-05-25T03:53:40.163Z

The "Configure Outlook object model prompt when responding to meeting and task requests (Prompt User | Automatically Approve | Automatically Deny | Prompt user based on computer security)" setting should be configured correctly for Outlook 2007.

CM-6

CM-7

CCE-1568-5

2009-07-30T19:30:18.343Z

2012-05-25T03:53:40.257Z

The "Configure Outlook object model prompt when executing Save As (Prompt User | Automatically Approve | Automatically Deny | Prompt user based on computer security)" setting should be configured correctly for Outlook 2007.

CM-6

CM-7

CCE-1573-5

2009-07-30T19:30:18.343Z

2012-05-25T03:53:40.383Z

The "Configure Outlook object model prompt When accessing the Formula property of a UserProperty object (Prompt User | Automatically Approve | Automatically Deny | Prompt user based on computer security)" setting should be configured correctly for Outlook 2007.

CM-6

CM-7

CCE-1454-8

2009-07-30T19:30:18.360Z

2012-05-25T03:53:40.540Z

The "Configure Outlook object model prompt when accessing address information via UserProperties.Find (Prompt User | Automatically Approve | Automatically Deny | Prompt user based on computer security)" setting should be configured correctly for Outlook 2007.

CM-6

CM-7

CCE-1498-5

2009-07-30T19:30:18.377Z

2012-05-25T03:53:40.663Z

The "Required Certificate Authority" setting should be configured correctly for Outlook 2007.

CM-5

CM-6

CCE-1630-3

2009-07-30T19:30:18.390Z

2012-05-25T03:53:40.727Z

The "S/MIME interoperability with external clients: (Handle internally | Handle externally | Handle if possible)" setting should be configured correctly for Outlook 2007.

CM-6

SC-9

CCE-1626-1

2009-07-30T19:30:18.390Z

2012-05-25T03:53:40.790Z

The "Always use Rich Text formatting in S/MIME messages" setting should be configured correctly for Outlook 2007.

CM-6

CCE-1163-5

2009-07-30T19:30:18.407Z

2012-05-25T03:53:40.853Z

The "S/MIME password settings" setting should be configured correctly for Outlook 2007.

CM-6

SC-9

CCE-1445-6

2009-07-30T19:30:18.420Z

2012-05-25T03:53:40.913Z

The "S/MIME password settings - Default S/MIME password time (minutes): (0 - 2147483647)" setting should be configured correctly for Outlook 2007.

CM-6

SC-9

CCE-1582-6

2009-07-30T19:30:18.437Z

2012-05-25T03:53:40.993Z

The "S/MIME password settings - Maximum S/MIME password time (minutes): (0 - 2147483647)" setting should be configured correctly for Outlook 2007.

CM-6

SC-9

CCE-1357-3

2009-07-30T19:30:18.437Z

2012-05-25T03:53:41.150Z

The "Message Formats" setting should be configured correctly for Outlook 2007.

CM-5

CM-6

CCE-1132-0

2009-07-30T19:30:18.453Z

2012-05-25T03:53:41.320Z

CM-6

SC-1

CCE-1511-5

2009-07-30T19:30:18.467Z

2012-05-25T03:53:41.523Z

2007: The "Do not provide Continue option on Encryption warning dialog boxes" setting should be configured correctly for Outlook 2007. 2003: The "Disable Continue button on all Encryption warning dialogs" setting should be configured correctly.

AC-4

CCE-1018-1

2009-07-30T19:30:18.483Z

2012-05-25T03:53:41.603Z

The "Run in FIPS compliant mode" setting should be configured correctly for Outlook 2007.

CM-6

IA-7

CCE-1181-7

2009-07-30T19:30:18.517Z

2012-05-25T03:53:41.697Z

The "Encrypt all e-mail messages" setting should be configured correctly for Outlook 2007 and 2003.

CM-6

SC-9

CCE-1639-4

2009-07-30T19:30:18.517Z

2012-05-25T03:53:41.790Z

The "Sign all e-mail messages" setting should be configured correctly for Outlook 2007.

CM-6

CCE-677-5

2009-07-30T19:30:18.530Z

2012-05-25T03:53:41.883Z

The "URL for S/MIME certificates" setting should be configured correctly for Outlook 2007.

CM-6

CM-7

SC-9

CCE-687-4

2009-07-30T19:30:18.547Z

2012-05-25T03:53:42.057Z

The "Ensure all S/MIME signed messages have a label" setting should be configured correctly for Outlook 2007.

CM-6

CCE-1613-9

2009-07-30T19:30:18.563Z

2012-05-25T03:53:42.133Z

The "S/MIME receipt requests (Open message if receipt can't be sent | Don't open message if receipt can't be sent | Always prompt before sending receipt | Never send S/MIME )" setting should be configured correctly for Outlook 2007.

CM-6

SC-9

CCE-1402-7

2009-07-30T19:30:18.563Z

2012-05-25T03:53:42.210Z

The "Fortezza certificate policies" setting should be configured correctly for Outlook 2007.

AC-3

CM-6

CCE-1658-4

2009-07-30T19:30:18.577Z

2012-05-25T03:53:42.307Z

The "Require SuiteB algorithms for S/MIME operations" setting should be configured correctly for Outlook 2007.

CM-6

SC-9

CCE-1662-6

2009-07-30T19:30:18.593Z

2012-05-25T03:53:42.383Z

The "Missing CRLs" setting should be configured correctly for Outlook 2007.

CM-5

CM-6

IA-5

CCE-1080-1

2009-07-30T19:30:18.610Z

2012-05-25T03:53:42.477Z

The "Missing CRLs - Indicate a missing CRL as a(n): (warning | error)" setting should be configured correctly for Outlook 2007.

CM-5

CM-6

IA-5

CCE-1076-9

2009-07-30T19:30:18.627Z

2012-05-25T03:53:42.557Z

The "Missing root certificates" setting should be configured correctly for Outlook 2007.

CM-5

CM-6

IA-5

CCE-1636-0

2009-07-30T19:30:18.640Z

2012-05-25T03:53:42.650Z

The "Missing root certificates - Indicate a missing root certificate as a(n): (neither error nor warning | warning | error)" setting should be configured correctly for Outlook 2007.

SC-7

CCE-943-1

2009-07-30T19:30:18.657Z

2012-05-25T03:53:42.710Z

The "Promote Level 2 errors as errors, not warnings" setting should be configured correctly for Outlook 2007.

CM-6

CCE-1591-7

2009-07-30T19:30:18.657Z

2012-05-25T03:53:42.790Z

The "Attachment Secure Temporary Folder" setting should be configured correctly for Outlook 2007.

CM-6

CM-7

CCE-1133-8

2009-07-30T19:30:18.687Z

2012-05-25T03:53:42.867Z

The "Display pictures and external content in HTML e-mail" setting should be configured correctly for Outlook 2007.

AC-3

SC-1

CCE-725-2

2009-07-30T19:30:18.687Z

2012-05-25T03:53:42.947Z

The "Automatically download content for e-mail from people in Safe Senders and Safe Recipients Lists" setting should be configured correctly for Outlook 2007.

CM-6

CM-7

CCE-1347-4

2009-07-30T19:30:18.703Z

2012-05-25T03:53:43.023Z

The "Do not permit download of content from safe zones" setting should be configured correctly for Outlook 2007.

CM-6

CCE-1475-3

2009-07-30T19:30:18.717Z

2012-05-25T03:53:43.117Z

The "Block Trusted Zones" setting should be configured correctly for Outlook 2007.

CM-7

CCE-1497-7

2009-07-30T19:30:18.733Z

2012-05-25T03:53:43.197Z

The "Include Internet in Safe Zones for Automatic Picture Download" setting should be configured correctly for Outlook 2007.

AC-5

CM-6

CCE-1501-6

2009-07-30T19:30:18.733Z

2012-05-25T03:53:43.290Z

The "Include Intranet in Safe Zones for Automatic Picture Download" setting should be configured correctly for Outlook 2007.

AC-5

CM-6

CCE-1030-6

2009-07-30T19:30:18.750Z

2012-05-25T03:53:43.383Z

The "Security setting for macros (Always warn | Never warn, disable all | Warn for signed, disable unsigned | No security check)" setting should be configured correctly for Outlook 2007.

SC-1

SI-3

CCE-1052-0

2009-07-30T19:30:18.767Z

2012-05-25T03:53:43.493Z

The "Enable links in e-mail messages" setting should be configured correctly for Outlook 2007.

CM-6

CCE-1462-1

2009-07-30T19:30:18.767Z

2012-05-25T03:53:43.587Z

The "Apply macro security settings to macros, add-ins, and SmartTags" setting should be configured correctly for Outlook 2007.

CM-6

CM-7

CCE-1281-5

2009-07-30T19:30:18.780Z

2012-05-25T03:53:43.663Z

The "Automatically configure profile based on Active Directory Primary SMTP address" setting should be configured correctly for Outlook 2007.

CM-6

CM-7

CCE-1303-7

2009-07-30T19:30:18.797Z

2012-05-25T03:53:43.727Z

The "Do not allow users to change permissions on folders" setting should be configured correctly for Outlook 2007.

AC-3

CM-6

CCE-1082-7

2009-07-30T19:30:18.797Z

2012-05-25T03:53:43.837Z

The "Enable RPC encryption" setting should be configured correctly for Outlook 2007.

CM-5

CM-6

SC-9

CCE-1712-9

2009-07-30T19:30:18.813Z

2012-05-25T03:53:43.913Z

The "Authentication with Exchange Server (Kerberos/NTLM Password Authentication | Kerberos Password Authentication | NTLM Password Authentication)" setting should be configured correctly for Outlook 2007.

CM-7

CCE-1131-2

2009-07-30T19:30:18.827Z

2012-05-25T03:53:43.977Z

The "Synchronize Outlook RSS Feeds with Common Feed List" setting should be configured correctly for Outlook 2007.

CM-6

CCE-1620-4

2009-07-30T19:30:18.827Z

2012-05-25T03:53:44.057Z

The "Turn off RSS feature" setting should be configured correctly for Outlook 2007.

CM-6

CCE-1541-2

2009-07-30T19:30:18.843Z

2012-05-25T03:53:44.133Z

The "Automatically download enclosures" setting should be configured correctly for Outlook 2007.

CM-7

SI-8

CCE-1311-0

2009-07-30T19:30:18.860Z

2012-05-25T03:53:44.197Z

The "Download full text of articles as HTML attachments" setting should be configured correctly for Outlook 2007.

CM-6

CM-7

CCE-1682-4

2009-07-30T19:30:18.860Z

2012-05-25T03:53:44.273Z

The "Automatically download attachments" setting should be configured correctly for Outlook 2007.

CM-6

CM-7

CCE-1461-3

2009-07-30T19:30:18.877Z

2012-05-25T03:53:44.353Z

The "Do not include Internet Calendar integration in Outlook" setting should be configured correctly for Outlook 2007.

CM-6

CCE-1041-3

2009-07-30T19:30:18.890Z

2012-05-25T03:53:44.430Z

The "Disable user entries to server list (Publish default, allow others | Publish default, disallow others)" setting should be configured correctly for Outlook 2007.

CM-5

CM-6

CCE-1565-1

2009-07-30T19:30:18.890Z

2012-05-25T03:53:44.493Z

The "Do not expand distribution lists" setting should be configured correctly for Outlook 2007.

CM-6

CCE-1719-4

2009-07-30T19:30:18.907Z

2012-05-25T03:53:44.587Z

The "Save files in this format (PowerPoint Presentation (*.pptx) | PowerPoint Macro-Enabled Presentation (*.pptm) | PowerPoint 97-2003 Presentation (*.ppt))" setting should be configured correctly for PowerPoint 2007.

CM-6

CCE-1477-9

2009-07-30T19:30:18.907Z

2012-05-25T03:53:44.650Z

The "Number of documents in the Recent Documents list (0 - 50)" setting should be configured correctly for PowerPoint 2007.

AC-6

CM-6

CCE-1142-9

2009-07-30T19:30:18.920Z

2012-05-25T03:53:44.773Z

The "Determine whether to force encrypted macros to be scanned in Microsoft PowerPoint Open XML presentations" setting should be configured correctly for PowerPoint 2007.

CM-6

CM-7

SC-1

SI-3

CCE-1649-3

2009-07-30T19:30:18.937Z

2012-05-25T03:53:44.977Z

The "Run Programs (disable (don't run any programs) | enable (prompt user before running) | enable all (run without prompting))" setting should be configured correctly for PowerPoint 2007.

CM-6

CM-7

SC-1

SI-3

CCE-1279-9

2009-07-30T19:30:18.937Z

2012-05-25T03:53:45.133Z

The "Make hidden markup visible" setting should be configured correctly for PowerPoint 2007.

CM-6

CCE-1451-4

2009-07-30T19:30:18.953Z

2012-05-25T03:53:45.273Z

The "Unblock automatic download of linked images" setting should be configured correctly for PowerPoint 2007.

CM-6

CM-7

SC-1

SI-3

CCE-1204-7

2009-07-30T19:30:18.967Z

2012-05-25T03:53:45.353Z

The "Disable all application add-ins" setting should be configured correctly for PowerPoint 2007.

CM-6

SC-1

CCE-1107-2

2009-07-30T19:30:18.967Z

2012-05-25T03:53:45.447Z

The "Require that application add-ins are signed by Trusted Publisher" setting should be configured correctly for PowerPoint 2007.

CM-5

CM-6

CCE-743-5

2009-07-30T19:30:18.983Z

2012-05-25T03:53:45.540Z

The "Disable Trust Bar Notification for unsigned application add-ins" setting should be configured correctly for PowerPoint 2007.

CM-5

CM-6

CCE-747-6

2009-07-30T19:30:19.000Z

2012-05-25T03:53:45.697Z

The "Allow Trusted Locations not on the computer" setting should be configured correctly for PowerPoint 2007.

CM-6

CCE-782-3

2009-07-30T19:30:19.000Z

2012-05-25T03:53:45.853Z

The "Disable all trusted locations" setting should be configured correctly for PowerPoint 2007.

CM-6

CCE-1327-6

2009-07-30T19:30:19.017Z

2012-05-25T03:53:46.023Z

The "Disable commands" setting should be configured correctly for PowerPoint 2007.

CM-6

CM-7

CCE-1723-6

2009-07-30T19:30:19.030Z

2012-05-25T03:53:46.150Z

The "Disable commands - Office Button | PowerPoint Options | Customize | All Commands | Web Page Preview" setting should be configured correctly for PowerPoint 2007.

CM-6

CM-7

CCE-1366-4

2009-07-30T19:30:19.030Z

2012-05-25T03:53:46.210Z

The "Disable commands - Office Button | Send | Email" setting should be configured correctly for PowerPoint 2007.

CM-6

CM-7

CCE-1679-0

2009-07-30T19:30:19.047Z

2012-05-25T03:53:46.290Z

The "Disable commands - Insert | Links | Hyperlink" setting should be configured correctly for PowerPoint 2007.

CM-6

CM-7

CCE-1173-4

2009-07-30T19:30:19.063Z

2012-05-25T03:53:46.353Z

The "Disable commands - Review | Proofing | Language" setting should be configured correctly for PowerPoint 2007.

CM-6

CM-7

CCE-1714-5

2009-07-30T19:30:19.063Z

2012-05-25T03:53:46.430Z

The "Disable commands - View | Macros | Macros" setting should be configured correctly for PowerPoint 2007.

CM-6

CM-7

CCE-1485-2

2009-07-30T19:30:19.077Z

2012-05-25T03:53:46.570Z

The "Disable commands - Developer | Code | Macros" setting should be configured correctly for PowerPoint 2007.

CM-6

CM-7

SC-1

SI-3

CCE-1687-3

2009-07-30T19:30:19.093Z

2012-05-25T03:53:46.710Z

The "Disable commands - Developer | Code | Macro Security" setting should be configured correctly for PowerPoint 2007.

CM-6

CM-7

SC-1

SI-3

CCE-1709-5

2009-07-30T19:30:19.093Z

2012-05-25T03:53:46.837Z

The "Disable commands - Developer | Code | Visual Basic" setting should be configured correctly for PowerPoint 2007.

CM-6

CM-7

SC-1

SI-3

CCE-1463-9

2009-07-30T19:30:19.110Z

2012-05-25T03:53:46.947Z

The "Disable commands - Office Button | PowerPoint Options | Customize | All Commands | Document Location" setting should be configured correctly for PowerPoint 2007.

CM-6

CM-7

CCE-1467-0

2009-07-30T19:30:19.127Z

2012-05-25T03:53:47.023Z

The "Disable commands - Disable shortcut keys" setting should be configured correctly for PowerPoint 2007.

CM-6

CM-7

CCE-1740-0

2009-07-30T19:30:19.127Z

2012-05-25T03:53:47.087Z

The "Disable commands - Ctrl+K (Insert | Links | Hyperlink)" setting should be configured correctly for PowerPoint 2007.

CM-6

CM-7

SC-1

SI-3

CCE-1780-6

2009-07-30T19:30:19.140Z

2012-05-25T03:53:47.163Z

The "Disable commands - Alt+F8 (Developer | Code | Macros)" setting should be configured correctly for PowerPoint 2007.

CM-6

CM-7

SC-1

SI-3

CCE-1661-8

2009-07-30T19:30:19.157Z

2012-05-25T03:53:47.243Z

The "Disable commands - Alt+F11 (Developer | Code | Visual Basic)" setting should be configured correctly for PowerPoint 2007.

CM-6

CM-7

SC-1

SI-3

CCE-1688-1

2009-07-30T19:30:19.157Z

2012-05-25T03:53:47.307Z

The "Block opening of pre-release versions of file formats new to PowerPoint 2007" setting should be configured correctly for PowerPoint 2007.

CM-7

CCE-1701-2

2009-07-30T19:30:19.170Z

2012-05-25T03:53:47.367Z

The "Block opening of Open Xml files types" setting should be configured correctly for PowerPoint 2007.

CM-7

CCE-1348-2

2009-07-30T19:30:19.187Z

2012-05-25T03:53:47.447Z

The "Block opening of Binary file types" setting should be configured correctly for PowerPoint 2007.

CM-7

CCE-1644-4

2009-07-30T19:30:19.187Z

2012-05-25T03:53:47.540Z

The "Block opening of Html file types" setting should be configured correctly for PowerPoint 2007.

CM-7

CCE-1194-0

2009-07-30T19:30:19.203Z

2012-05-25T03:53:47.603Z

The "Block opening of Outlines" setting should be configured correctly for PowerPoint 2007.

CM-7

CCE-1216-1

2009-07-30T19:30:19.203Z

2012-05-25T03:53:47.680Z

The "Block opening of Converters" setting should be configured correctly for PowerPoint 2007.

CM-7

CCE-1506-5

2009-07-30T19:30:19.217Z

2012-05-25T03:53:47.757Z

The "Block saving of Open Xml file types" setting should be configured correctly for PowerPoint 2007.

CM-7

CCE-1136-1

2009-07-30T19:30:19.233Z

2012-05-25T03:53:47.820Z

The "Block saving of Binary file types" setting should be configured correctly for PowerPoint 2007.

CM-7

CCE-1766-5

2009-07-30T19:30:19.233Z

2012-05-25T03:53:47.900Z

The "Block saving of Html file types" setting should be configured correctly for PowerPoint 2007.

CM-7

CCE-1180-9

2009-07-30T19:30:19.250Z

2012-05-25T03:53:47.993Z

The "Block saving of Outlines" setting should be configured correctly for PowerPoint 2007.

CM-7

CCE-1722-8

2009-07-30T19:30:19.267Z

2012-05-25T03:53:48.070Z

The "Block saving of GraphicFilters" setting should be configured correctly for PowerPoint 2007.

CM-7

CCE-1731-9

2009-07-30T19:30:19.267Z

2012-05-25T03:53:48.133Z

The "Disable Slide Update" setting should be configured correctly for PowerPoint 2007.

CM-5

CM-6

CCE-885-4

2009-07-30T19:30:19.280Z

2012-05-25T03:53:48.210Z

The "Hidden text" setting should be configured correctly for Word 2007.

CM-6

CCE-1656-8

2009-07-30T19:30:19.297Z

2012-05-25T03:53:48.273Z

CM-6

CCE-1537-0

2009-07-30T19:30:19.297Z

2012-05-25T03:53:48.353Z

The "Number of documents in the Recent Documents list (0-50)" setting should be configured correctly for Word 2007.

AC-6

CM-6

CCE-1249-2

2009-07-30T19:30:19.313Z

2012-05-25T03:53:48.430Z

The "Update automatic links at Open" setting should be configured correctly for Word 2007.

CM-6

CCE-1509-9

2009-07-30T19:30:19.327Z

2012-05-25T03:53:48.493Z

The "Save smart tags in e-mail" setting should be configured correctly for Word 2007.

CM-6

CCE-1280-7

2009-07-30T19:30:19.327Z

2012-05-25T03:53:48.570Z

The "Determine whether to force encrypted macros to be scanned in Microsoft Word Open XML documents" setting should be configured correctly for Word 2007.

CM-6

CM-7

SC-1

SI-3

CCE-1681-6

2009-07-30T19:30:19.343Z

2012-05-25T03:53:48.650Z

The "Disable all application add-ins" setting should be configured correctly for Word 2007.

CM-6

SC-1

CCE-1562-8

2009-07-30T19:30:19.360Z

2012-05-25T03:53:48.743Z

The "Require that application add-ins are signed by Trusted Publisher" setting should be configured correctly for Word 2007.

CM-5

CM-6

CCE-1333-4

2009-07-30T19:30:19.377Z

2012-05-25T03:53:48.837Z

The "Disable Trust Bar Notification for unsigned application add-ins" setting should be configured correctly for Word 2007.

CM-5

CM-6

CCE-1355-7

2009-07-30T19:30:19.377Z

2012-05-25T03:53:48.930Z

The "Allow Trusted Locations not on the computer" setting should be configured correctly for Word 2007.

CM-6

CCE-1637-8

2009-07-30T19:30:19.390Z

2012-05-25T03:53:49.023Z

The "Disable all trusted locations" setting should be configured correctly for Word 2007.

CM-6

CCE-1659-2

2009-07-30T19:30:19.407Z

2012-05-25T03:53:49.117Z

The "Disable commands" setting should be configured correctly for Word 2007.

CM-6

CM-7

CCE-1329-2

2009-07-30T19:30:19.407Z

2012-05-25T03:53:49.210Z

The "Disable commands - Office Button | Word Options | Customize | All Commands | Save As Web Page" setting should be configured correctly for Word 2007.

CM-6

CM-7

CCE-1632-9

2009-07-30T19:30:19.420Z

2012-05-25T03:53:49.337Z

The "Disable commands - Office Button | Word Options | Customize | All Commands | Web Page Preview" setting should be configured correctly for Word 2007.

CM-6

CM-7

CCE-1425-8

2009-07-30T19:30:19.420Z

2012-05-25T03:53:49.460Z

The "Disable commands - Office Button | Send | Email" setting should be configured correctly for Word 2007.

CM-6

CM-7

CCE-1196-5

2009-07-30T19:30:19.437Z

2012-05-25T03:53:49.557Z

The "Disable commands - Insert | Links | Hyperlink" setting should be configured correctly for Word 2007.

CM-6

CM-7

CCE-936-5

2009-07-30T19:30:19.453Z

2012-05-25T03:53:49.650Z

The "Disable commands - Review | Protect | Protect Document" setting should be configured correctly for Word 2007.

CM-6

CM-7

CCE-1354-0

2009-07-30T19:30:19.453Z

2012-05-25T03:53:49.727Z

The "Disable commands - View | Macros | Macros" setting should be configured correctly for Word 2007.

CM-6

CM-7

CCE-1125-4

2009-07-30T19:30:19.467Z

2012-05-25T03:53:49.807Z

The "Disable commands - Developer | Code | Macros" setting should be configured correctly for Word 2007.

CM-6

CM-7

SC-1

SI-3

CCE-1742-6

2009-07-30T19:30:19.483Z

2012-05-25T03:53:49.883Z

The "Disable commands - Developer | Code | Record Macro" setting should be configured correctly for Word 2007.

CM-6

CM-7

SC-1

SI-3

CCE-1782-2

2009-07-30T19:30:19.483Z

2012-05-25T03:53:49.947Z

The "Disable commands - Developer | Code | Macro Security" setting should be configured correctly for Word 2007.

CM-6

CM-7

SC-1

SI-3

CCE-1306-0

2009-07-30T19:30:19.500Z

2012-05-25T03:53:50.023Z

The "Disable commands - Developer | Code | Visual Basic" setting should be configured correctly for Word 2007.

CM-6

CM-7

SC-1

SI-3

CCE-1548-7

2009-07-30T19:30:19.517Z

2012-05-25T03:53:50.103Z

The "Disable commands - Developer | Templates | Document Template" setting should be configured correctly for Word 2007.

CM-6

CM-7

CCE-1716-0

2009-07-30T19:30:19.517Z

2012-05-25T03:53:50.180Z

The "Disable shortcut keys" setting should be configured correctly for Word 2007.

CM-5

CM-6

CCE-1597-4

2009-07-30T19:30:19.530Z

2012-05-25T03:53:50.257Z

The "Disable shortcut keys - Ctrl+F (Home | Editing | Find)" setting should be configured correctly for Word 2007.

CM-5

CM-6

CCE-1689-9

2009-07-30T19:30:19.547Z

2012-05-25T03:53:50.337Z

The "Disable shortcut keys - Ctrl+K (Insert | Links | Hyperlink)" setting should be configured correctly for Word 2007.

CM-5

CM-6

CCE-1570-1

2009-07-30T19:30:19.547Z

2012-05-25T03:53:50.430Z

The "Disable shortcut keys - Alt+F8 (Developer | Code | Macros)" setting should be configured correctly for Word 2007.

CM-5

CM-6

CCE-1720-2

2009-07-30T19:30:19.563Z

2012-05-25T03:53:50.493Z

The "Disable shortcut keys - Alt+F11 (Developer | Code | Visual Basic)" setting should be configured correctly for Word 2007.

CM-5

CM-6

CCE-1746-7

2009-07-30T19:30:19.577Z

2012-05-25T03:53:50.587Z

The "Block opening of pre-release versions of file formats new to Word 2007" setting should be configured correctly for Word 2007.

CM-7

CCE-1504-0

2009-07-30T19:30:19.577Z

2012-05-25T03:53:50.663Z

The "Block opening of Open XML file types" setting should be configured correctly for Word 2007.

CM-7

CCE-1654-3

2009-07-30T19:30:19.593Z

2012-05-25T03:53:50.790Z

The "Block opening of Binary file types" setting should be configured correctly for Word 2007.

CM-7

CCE-1160-1

2009-07-30T19:30:19.610Z

2012-05-25T03:53:50.883Z

The "Block opening of HTML file types" setting should be configured correctly for Word 2007.

CM-7

CCE-958-9

2009-07-30T19:30:19.610Z

2012-05-25T03:53:50.960Z

The "Block opening of Word 2003 XML file types" setting should be configured correctly for Word 2007.

CM-7

CCE-1579-2

2009-07-30T19:30:19.627Z

2012-05-25T03:53:51.070Z

The "Block opening of RTF file types" setting should be configured correctly for Word 2007.

CM-7

CCE-984-5

2009-07-30T19:30:19.640Z

2012-05-25T03:53:51.197Z

The "Block open Converters" setting should be configured correctly for Word 2007.

CM-7

CCE-1072-8

2009-07-30T19:30:19.640Z

2012-05-25T03:53:51.337Z

The "Block opening of Text file types" setting should be configured correctly for Word 2007.

CM-7

CCE-1503-2

2009-07-30T19:30:19.657Z

2012-05-25T03:53:51.460Z

The "Block opening of Internal file types" setting should be configured correctly for Word 2007.

CM-7

CCE-1371-4

2009-07-30T19:30:19.670Z

2012-05-25T03:53:51.603Z

The "Block opening of files before version" setting should be configured correctly for Word 2007.

CM-7

CCE-1019-9

2009-07-30T19:30:19.670Z

2012-05-25T03:53:51.680Z

The "Block saving of Open XML file types" setting should be configured correctly for Word 2007.

CM-7

CCE-1684-0

2009-07-30T19:30:19.687Z

2012-05-25T03:53:51.757Z

The "Block saving of Binary file types" setting should be configured correctly for Word 2007.

CM-7

CCE-1675-8

2009-07-30T19:30:19.703Z

2012-05-25T03:53:51.837Z

The "Block saving of HTML file types" setting should be configured correctly for Word 2007.

CM-7

CCE-1200-5

2009-07-30T19:30:19.703Z

2012-05-25T03:53:51.913Z

The "Block saving of Word 2003 XML file types" setting should be configured correctly for Word 2007.

CM-7

CCE-1741-8

2009-07-30T19:30:19.717Z

2012-05-25T03:53:52.087Z

The "Block saving of RTF file types" setting should be configured correctly for Word 2007.

CM-7

CCE-1231-0

2009-07-30T19:30:19.733Z

2012-05-25T03:53:52.257Z

The "Block saving of Converters" setting should be configured correctly for Word 2007.

CM-7

CCE-1755-8

2009-07-30T19:30:19.750Z

2012-05-25T03:53:52.383Z

The "Block saving of Text file types" setting should be configured correctly for Word 2007.

CM-7

CCE-1169-2

2009-07-30T19:30:19.750Z

2012-05-25T03:53:52.447Z

The InfoPath APTCA Assembly Whitelist setting should be configured correctly.

CM-6

CM-7

SC-1

SI-3

CCE-1735-0

2009-07-30T19:30:19.767Z

2012-05-25T03:53:52.507Z

The Windows Internet Explorer Feature Control Opt-In (None | InfoPath.exe, Document Information Panel and Workflow forms | InfoPath.exe, Document Information Panel, Workflow forms and 3rd Party Hosting) setting should be configured correctly.

CM-6

CM-7

SC-1

SI-3

CCE-1739-2

2009-07-30T19:30:19.780Z

2012-05-25T03:53:52.603Z

The InfoPath APTCA Assembly Whitelist Enforcement setting should be configured correctly.

CM-6

CM-7

SC-1

SI-3

CCE-933-2

2009-07-30T19:30:19.780Z

2012-05-25T03:53:52.663Z

The Disable Package Repair setting should be configured correctly.

CM-6

SI-2

CCE-1563-6

2009-07-30T19:30:19.797Z

2012-05-25T03:53:52.757Z

The Disable user name and password setting should be configured correctly.

AC-3

CM-6

CM-7

CCE-1215-3

2009-07-30T19:30:19.813Z

2012-05-25T03:53:52.837Z

The Disable user name and password - excel.exe setting should be configured correctly.

AC-3

CM-6

CM-7

CCE-1484-5

2009-07-30T19:30:19.827Z

2012-05-25T03:53:52.913Z

The Disable user name and password - powerpnt.exe setting should be configured correctly.

AC-3

CM-6

CM-7

CCE-1629-5

2009-07-30T19:30:19.843Z

2012-05-25T03:53:52.993Z

The Disable user name and password - pptview.exe setting should be configured correctly.

AC-3

CM-6

CM-7

CCE-1762-4

2009-07-30T19:30:19.843Z

2012-05-25T03:53:53.103Z

The Disable user name and password - winword.exe setting should be configured correctly.

AC-3

CM-6

CM-7

CCE-1660-0

2009-07-30T19:30:19.860Z

2012-05-25T03:53:53.180Z

The Disable user name and password - outlook.exe setting should be configured correctly.

AC-3

CM-6

CM-7

CCE-1057-9

2009-07-30T19:30:19.877Z

2012-05-25T03:53:53.273Z

The Disable user name and password - spDesign.exe setting should be configured correctly.

AC-3

CM-6

CM-7

CCE-1285-6

2009-07-30T19:30:19.877Z

2012-05-25T03:53:53.367Z

The Disable user name and password - msaccess.exe setting should be configured correctly.

AC-3

CM-6

CM-7

CCE-1669-1

2009-07-30T19:30:19.907Z

2012-05-25T03:53:53.430Z

The Bind to object setting should be configured correctly.

CM-7

CCE-1691-5

2009-07-30T19:30:19.907Z

2012-05-25T03:53:53.507Z

The Bind to object - excel.exe setting should be configured correctly.

CM-7

CCE-1338-3

2009-07-30T19:30:19.920Z

2012-05-25T03:53:53.587Z

The Bind to object - powerpnt.exe setting should be configured correctly.

CM-7

CCE-1717-8

2009-07-30T19:30:19.937Z

2012-05-25T03:53:53.650Z

The Bind to object - pptview.exe setting should be configured correctly.

CM-7

CCE-1488-6

2009-07-30T19:30:19.953Z

2012-05-25T03:53:53.727Z

The Bind to object - winword.exe setting should be configured correctly.

CM-7

CCE-1638-6

2009-07-30T19:30:19.953Z

2012-05-25T03:53:53.790Z

The Bind to object - outlook.exe setting should be configured correctly.

CM-7

CCE-1647-7

2009-07-30T19:30:19.967Z

2012-05-25T03:53:53.883Z

The Bind to object - spDesign.exe setting should be configured correctly.

CM-7

CCE-1294-8

2009-07-30T19:30:19.983Z

2012-05-25T03:53:53.960Z

The Bind to object - msaccess.exe setting should be configured correctly.

CM-7

CCE-1193-2

2009-07-30T19:30:19.983Z

2012-05-25T03:53:54.040Z

The Saved from URL setting should be configured correctly.

CM-6

CCE-1352-4

2009-07-30T19:30:20.000Z

2012-05-25T03:53:54.117Z

The Saved from URL - excel.exe setting should be configured correctly.

CM-6

CCE-928-2

2009-07-30T19:30:20.017Z

2012-05-25T03:53:54.243Z

The Saved from URL - powerpnt.exe setting should be configured correctly.

CM-6

CCE-1576-8

2009-07-30T19:30:20.030Z

2012-05-25T03:53:54.337Z

The Saved from URL - pptview.exe setting should be configured correctly.

CM-6

CCE-1100-7

2009-07-30T19:30:20.030Z

2012-05-25T03:53:54.413Z

The Saved from URL - pptview.exe setting should be configured correctly.

CM-6

CCE-1232-8

2009-07-30T19:30:20.047Z

2012-05-25T03:53:54.493Z

The Saved from URL - outlook.exe setting should be configured correctly.

CM-6

CCE-1774-9

2009-07-30T19:30:20.063Z

2012-05-25T03:53:54.570Z

The Saved from URL - spDesign.exe setting should be configured correctly.

CM-6

CCE-906-8

2009-07-30T19:30:20.063Z

2012-05-25T03:53:54.633Z

The Saved from URL - msaccess.exe setting should be configured correctly.

CM-6

CCE-1034-8

2009-07-30T19:30:20.077Z

2012-05-25T03:53:54.710Z

The Navigate URL setting should be configured correctly.

CM-6

CM-7

CCE-1435-7

2009-07-30T19:30:20.093Z

2012-05-25T03:53:54.867Z

The Navigate URL - excel.exe setting should be configured correctly.

CM-6

CM-7

CCE-1708-7

2009-07-30T19:30:20.110Z

2012-05-25T03:53:55.023Z

The Navigate URL - powerpnt.exe setting should be configured correctly.

CM-6

CM-7

CCE-808-6

2009-07-30T19:30:20.110Z

2012-05-25T03:53:55.197Z

The Navigate URL - pptview.exe setting should be configured correctly.

CM-6

CM-7

CCE-1650-1

2009-07-30T19:30:20.127Z

2012-05-25T03:53:55.367Z

The Navigate URL - winword.exe setting should be configured correctly.

CM-6

CM-7

CCE-1223-7

2009-07-30T19:30:20.140Z

2012-05-25T03:53:55.540Z

The Navigate URL - outlook.exe setting should be configured correctly.

CM-6

CM-7

CCE-1764-0

2009-07-30T19:30:20.157Z

2012-05-25T03:53:55.757Z

The Navigate URL - spDesign.exe setting should be configured correctly.

CM-6

CM-7

CCE-1769-9

2009-07-30T19:30:20.157Z

2012-05-25T03:53:55.837Z

The Navigate URL - msaccess.exe setting should be configured correctly.

CM-6

CM-7

CCE-1152-8

2009-07-30T19:30:20.187Z

2012-05-25T03:53:55.913Z

The Block popups setting should be configured correctly.

CM-7

CCE-1566-9

2009-07-30T19:30:20.187Z

2012-05-25T03:53:55.993Z

The Block popups - excel.exe setting should be configured correctly.

CM-7

CCE-1077-7

2009-07-30T19:30:20.203Z

2012-05-25T03:53:56.070Z

The Block popups - powerpnt.exe setting should be configured correctly.

CM-7

CCE-1606-3

2009-07-30T19:30:20.217Z

2012-05-25T03:53:56.227Z

The Block popups - pptview.exe setting should be configured correctly.

CM-7

CCE-1738-4

2009-07-30T19:30:20.217Z

2012-05-25T03:53:56.413Z

The Block popups - winword.exe setting should be configured correctly.

CM-7

CCE-1262-5

2009-07-30T19:30:20.233Z

2012-05-25T03:53:56.540Z

The Block popups - outlook.exe setting should be configured correctly.

CM-7

CCE-1663-4

2009-07-30T19:30:20.250Z

2012-05-25T03:53:56.650Z

The Block popups - spDesign.exe setting should be configured correctly.

CM-7

CCE-1544-6

2009-07-30T19:30:20.267Z

2012-05-25T03:53:56.727Z

The Block popups - msaccess.exe setting should be configured correctly.

CM-7

CCE-1443-1

2009-07-30T19:30:20.267Z

2012-05-25T03:53:56.820Z

The "Prevent users from customizing attachment security settings" setting should be configured correctly.

CM-5

CM-6

CCE-1161-9

2009-07-30T19:30:20.280Z

2012-05-25T03:53:56.960Z

The "Access: Macro Security Level" setting should be configured correctly.

AC-3

CM-6

CCE-1421-7

2009-07-30T19:30:20.297Z

2012-05-25T03:53:57.133Z

The "Access: Trust all installed add â€“ ins and templates" setting should be configured correctly.

AC-3

CM-6

CCE-1571-9

2009-07-30T19:30:20.297Z

2012-05-25T03:53:57.210Z

The "Excel: Macro Security Level" setting should be configured correctly.

SI-3

CCE-1721-0

2009-07-30T19:30:20.313Z

2012-05-25T03:53:57.273Z

The "Excel: Trust all installed add â€“ ins and templates" setting should be configured correctly.

CM-5

CCE-1602-2

2009-07-30T19:30:20.327Z

2012-05-25T03:53:57.353Z

The "Outlook: Macro Security Level" setting should be configured correctly.

CM-6

SI-3

CCE-1624-6

2009-07-30T19:30:20.327Z

2012-05-25T03:53:57.430Z

The "Outlook: Trust all installed add-ins and templates" setting should be configured correctly.

CM-6

SI-3

CCE-1522-2

2009-07-30T19:30:20.343Z

2012-05-25T03:53:57.540Z

The "Outlook virus security settings" setting should be configured correctly.

CM-6

SI-3

CCE-1183-3

2009-07-30T19:30:20.360Z

2012-05-25T03:53:57.663Z

The "S/MIME receipt requests" setting should be configured correctly.

CM-6

SC-9

CCE-1611-3

2009-07-30T19:30:20.377Z

2012-05-25T03:53:57.790Z

The "PowerPoint: Macro Security Level" setting should be configured correctly.

CM-6

SI-3

CCE-1633-7

2009-07-30T19:30:20.390Z

2012-05-25T03:53:57.913Z

The "PowerPoint: Trust all installed add â€“ ins and templates" setting should be configured correctly.

CM-6

SI-3

CCE-822-7

2009-07-30T19:30:20.407Z

2012-05-25T03:53:58.023Z

The "Publisher: Macro Security Level" setting should be configured correctly.

CM-6

CM-7

CCE-1734-3

2009-07-30T19:30:20.420Z

2012-05-25T03:53:58.117Z

The "Publisher: Trust all installed addâ€“ins and templates" setting should be configured correctly.

CM-6

CM-7

SC-1

SI-3

CCE-1628-7

2009-07-30T19:30:20.437Z

2012-05-25T03:53:58.180Z

The "Word: Macro Security Level" setting should be configured correctly.

CM-6

SI-3

CCE-1761-6

2009-07-30T19:30:20.437Z

2012-05-25T03:53:58.257Z

The "Word: Trust all installed addâ€“ins and templates" setting should be configured correctly.

CM-6

CM-7

SC-1

SI-3

CCE-1302-9

2009-07-30T19:30:20.453Z

2012-05-25T03:53:58.320Z

The "Store random number to improve merge accuracy" setting should be configured correctly.

CM-6

CM-7

CCE-1307-8

2009-07-30T19:30:20.467Z

2012-05-25T03:53:58.383Z

The "Prevent Users from Changing Office Encryption Settings" setting should be configured correctly.

CM-6

CM-7

SC-2

CCE-5658-0

2009-07-30T19:30:20.483Z

/export/home should be configured on an appropriate filesystem partition

SC-2

CCE-6235-6

2009-07-30T19:30:20.500Z

/var should be configured on an appropriate filesystem partition

SC-2

CCE-6315-6

2009-07-30T19:30:20.500Z

/opt should be configured on an appropriate filesystem partition

SC-2

CCE-5947-7

2009-07-30T19:30:20.517Z

The shell for the root account should be located on the appropriate filesystem

AC-6

CM-5

CM-6

CM-7

CCE-5546-7

2009-07-30T19:30:20.530Z

Core dump size limits should be set appropriately

SC-5

CCE-6294-3

2009-07-30T19:30:20.547Z

The read-only SNMP community string should be set appropriately.

AC-3

CM-6

CM-7

IA-5

CCE-6136-6

2009-07-30T19:30:20.547Z

The read/write SNMP community string should be set appropriately.

AC-3

CM-6

CM-7

IA-5

CCE-6105-1

2009-07-30T19:30:20.563Z

Password policy should ban or allow usernames or UIDs in passwords as appropriate

IA-5

CCE-6263-8

2009-07-30T19:30:20.593Z

Password policy should ban or allow words found in a dictionary as appropriate.

IA-5

CCE-6448-5

2009-07-30T19:30:20.610Z

Password policy should enforce the correct amount of special characters

IA-5

CCE-6417-0

2009-07-30T19:30:20.610Z

Password policy should enforce or not enforce the requirement to have mixed case passwords as appropriate.

IA-5

CCE-6078-0

2009-07-30T19:30:20.627Z

The minimum password age should be set as appropriate

AC-3

CM-6

CM-7

IA-5

CCE-5906-3

2009-07-30T19:30:20.640Z

The minimum required password length should be set as appropriate

AC-3

CM-6

CM-7

IA-5

CCE-6045-9

2009-07-30T19:30:20.640Z

Password history should be saved for an appropriate number of password changes

IA-5

CCE-5997-2

2009-07-30T19:30:20.657Z

The number of consecutive failed login attempts required to trigger a lockout should be set as appropriate

AC-7

CCE-6358-6

2009-07-30T19:30:20.670Z

AC-3

CM-6

IA-5

CCE-6375-0

2009-07-30T19:30:20.687Z

New users should be required or not required to change their password on first login as appropriate

AC-3

CM-6

IA-5

CCE-6080-6

2009-07-30T19:30:20.687Z

Access to single-user mode (maintainence mode) should require the root password or not as appropriate

AC-3

AC-6

CCE-6366-9

2009-07-30T19:30:20.703Z

All files should be owned by an existing account or not as appropriate.

AC-3

CM-6

CCE-6441-0

2009-07-30T19:30:20.717Z

All files should be owned by an existing group or not as appropriate.

AC-3

CM-6

CCE-5644-0

2009-07-30T19:30:20.717Z

The console login banner should be set appropriately.

AC-3

AC-8

CM-6

CCE-5784-4

2009-07-30T19:30:20.733Z

The SSH login banner should be set appropriately.

AC-3

AC-8

CM-6

CCE-6502-9

2009-07-30T19:30:20.750Z

The telnet login banner should be set appropriately.

AC-3

AC-8

CM-6

CCE-6440-2

2009-07-30T19:30:20.767Z

The ftp login banner should be set appropriately.

AC-3

AC-8

CM-6

CCE-6286-9

2009-07-30T19:30:20.767Z

The graphical login banner should be set appropriately.

AC-3

AC-8

CM-6

CCE-6472-5

2009-07-30T19:30:20.780Z

Accounts other than root should be allowed to have the UID 0 or not as appropriate

AC-2

CCE-6387-5

2009-07-30T19:30:20.797Z

Accounts other than root and locked system accounts should be allowed to have a GID of 0 or not as appropriate

AC-2

CCE-6224-0

2009-07-30T19:30:20.813Z

Each account should be assigned a unique UID or not as appropriate

AC-3

CM-6

CCE-6515-1

2009-07-30T19:30:20.813Z

The ftp account should exist or not as appropriate

AC-3

CM-6

CCE-6343-8

2009-07-30T19:30:20.827Z

AC-3

CM-6

CCE-5527-7

2009-07-30T19:30:20.843Z

The screen lock should activate after an appropriate period of inactivity

AC-1

AC-3

CM-6

CM-7

CCE-5855-2

2009-07-30T19:30:20.860Z

File permissions should be set appropriately for all shell executables.

AC-3

CM-6

CCE-6058-2

2009-07-30T19:30:20.860Z

Remote (serial) consoles should be enabled or disabled as appropriate.

AC-1

SC-7

CCE-8432-7

2009-07-30T19:30:20.877Z

Root logins should be restricted to the console or not as appropriate.

AC-1

SC-7

CCE-6430-3

2009-07-30T19:30:20.890Z

.netrc files should exist or not as appropriate for all users.

AC-3

CM-6

CCE-6522-7

2009-07-30T19:30:20.907Z

.rhosts files should exist or not as appropriate for all users.

AC-3

CM-6

CCE-6346-1

2009-07-30T19:30:20.907Z

.shosts files should exist or not as appropriate for all users.

AC-3

CM-6

CCE-6504-5

2009-07-30T19:30:20.920Z

The /etc/hosts.equiv file should exist or not as appropriate.

AC-3

CM-6

CM-7

CCE-8667-8

2009-07-30T19:30:20.937Z

2012-05-25T03:54:30.400Z

The use of NIS special characters (+ or -) in the first field of the /etc/passwd file should be allowed or disallowed as appropriate.

AC-4

SC-5

SC-7

CCE-8543-1

2009-07-30T19:30:20.953Z

2012-05-25T03:54:30.523Z

The use of NIS special characters (+ or -) in the first field of the /etc/shadow file should be allowed or disallowed as appropriate.

AC-4

SC-5

SC-7

CCE-8658-7

2009-07-30T19:30:20.953Z

2012-05-25T03:54:30.650Z

The use of NIS special characters (+ or -) in the first field of the /etc/group file should be allowed or disallowed as appropriate.

AC-4

SC-5

SC-7

CCE-6184-6

2009-07-30T19:30:20.967Z

Groups referenced in /etc/passwd should be included in /etc/group or not as appropriate.

AC-2

CCE-6413-9

2009-07-30T19:30:20.983Z

The home directory for the root account should be set appropriately.

AC-3

CM-6

CCE-6284-4

2009-07-30T19:30:20.983Z

The home directory for each user account should be set appropriately.

AC-3

CM-6

CCE-5628-3

2009-07-30T19:30:21.000Z

Home directories referenced in /etc/passwd should exist or not as appropriate

AC-3

CM-6

CCE-5730-7

2009-07-30T19:30:21.017Z

All device files should be located inside an appropriate path

AC-6

CCE-6476-6

2009-07-30T19:30:21.017Z

The ntpd service should be enabled or disabled as appropriate.

AU-8

CM-6

CM-7

CCE-6318-0

2009-07-30T19:30:21.030Z

The Network Time Protocol (ntp) synchronization server should be set appropriately.

AU-8

CM-6

CCE-6335-4

2009-07-30T19:30:21.047Z

The default gateway should be set appropriately.

CM-7

CCE-6450-1

2009-07-30T19:30:21.063Z

The xinetd service should be enabled or disabled as appropriate.

CM-6

CM-7

CCE-6150-7

2009-07-30T19:30:21.063Z

echo service should be enabled or disabled as appropriate

CM-6

CM-7

CCE-6414-7

2009-07-30T19:30:21.077Z

netstat service should be enabled or disabled as appropriate

CM-6

CM-7

CCE-6493-1

2009-07-30T19:30:21.093Z

rcp service should be enabled or disabled as appropriate

CM-6

CM-7

CCE-6277-8

2009-07-30T19:30:21.093Z

chargen service should be enabled or disabled as appropriate

CM-6

CM-7

CCE-5545-9

2009-07-30T19:30:21.110Z

finger service should be enabled or disabled as appropriate

CM-6

CM-7

CCE-6202-6

2009-07-30T19:30:21.127Z

tftpd service should be enabled or disabled as appropriate

CM-6

CM-7

CCE-6354-5

2009-07-30T19:30:21.140Z

walld service should be enabled or disabled as appropriate

CM-6

CM-7

CCE-6200-0

2009-07-30T19:30:21.140Z

rstatd service should be enabled or disabled as appropriate

CM-6

CM-7

CCE-6028-5

2009-07-30T19:30:21.157Z

sprayd service should be enabled or disabled as appropriate

CM-6

CM-7

CCE-6415-4

2009-07-30T19:30:21.170Z

rusersd service should be enabled or disabled as appropriate

CM-6

CM-7

CCE-6393-3

2009-07-30T19:30:21.170Z

rlogin service should be enabled or disabled as appropriate

CM-6

CM-7

CCE-6296-8

2009-07-30T19:30:21.187Z

rsh service should be enabled or disabled as appropriate

CM-6

CM-7

CCE-6499-8

2009-07-30T19:30:21.203Z

ftp service should be enabled or disabled as appropriate

CM-6

CM-7

CCE-6204-2

2009-07-30T19:30:21.217Z

telnet service should be enabled or disabled as appropriate

CM-6

CM-7

CCE-6238-0

2009-07-30T19:30:21.217Z

DEPRECATED.

CCE-5562-4

2009-07-30T19:30:21.233Z

inn service should be enabled or disabled as appropriate

CM-6

CM-7

CCE-6520-1

2009-07-30T19:30:21.250Z

uucp service should be enabled or disabled as appropriate

CM-6

CM-7

CCE-6220-8

2009-07-30T19:30:21.267Z

rexec service should be enabled or disabled as appropriate

CM-6

CM-7

CCE-6049-1

2009-07-30T19:30:21.267Z

font-service should be enabled or disabled as appropriate

CM-6

CM-7

CCE-6458-4

2009-07-30T19:30:21.280Z

imap2 service should be enabled or disabled as appropriate

CM-6

CM-7

CCE-6427-9

2009-07-30T19:30:21.297Z

pop3 service should be enabled or disabled as appropriate

CM-6

CM-7

CCE-6554-0

2009-07-30T19:30:21.297Z

ident service should be enabled or disabled as appropriate

CM-6

CM-7

CCE-6422-0

2009-07-30T19:30:21.313Z

rexd service should be enabled or disabled as appropriate

CM-6

CM-7

CCE-6369-3

2009-07-30T19:30:21.327Z

daytime service should be enabled or disabled as appropriate

CM-6

CM-7

CCE-6523-5

2009-07-30T19:30:21.343Z

dtspc (cde-spc) service should be enabled or disabled as appropriate

CM-6

CM-7

CCE-5836-2

2009-07-30T19:30:21.360Z

rquotad service should be enabled or disabled as appropriate

CM-6

CM-7

CCE-6426-1

2009-07-30T19:30:21.360Z

cmsd service should be enabled or disabled as appropriate

CM-6

CM-7

CCE-5567-3

2009-07-30T19:30:21.377Z

tooltalk service should be enabled or disabled as appropriate

CM-6

CM-7

CCE-6293-5

2009-07-30T19:30:21.390Z

DEPRECATED.

CCE-5575-6

2009-07-30T19:30:21.407Z

discard service should be enabled or disabled as appropriate

CM-6

CM-7

CCE-6270-3

2009-07-30T19:30:21.407Z

DEPRECATED.

CCE-6508-6

2009-07-30T19:30:21.437Z

vino-server service should be enabled or disabled as appropriate

CM-6

CM-7

CCE-6507-8

2009-07-30T19:30:21.437Z

The bind service should be enabled or disabled as appropriate.

CM-6

CM-7

CCE-5576-4

2009-07-30T19:30:21.453Z

The version string reported by the bind service should be configured appropriately.

SC-7

CCE-6243-0

2009-07-30T19:30:21.467Z

The nfsd service should be enabled or disabled as appropriate

CM-6

CM-7

CCE-6468-3

2009-07-30T19:30:21.483Z

The mountd service should be enabled or disabled as appropriate

CM-6

CM-7

CCE-5918-8

2009-07-30T19:30:21.483Z

The statd service should be enabled or disabled as appropriate

CM-6

CCE-6303-2

2009-07-30T19:30:21.500Z

The lockd service should be enabled or disabled as appropriate

CM-6

CM-7

CCE-5669-7

2009-07-30T19:30:21.517Z

NFS should be configured with appropriate authentication methods

AC-3

CM-6

CCE-5809-9

2009-07-30T19:30:21.530Z

The read-only (ro) option should be enabled or disabled as appropriate for all NFS exports.

CM-6

CM-7

CCE-6514-4

2009-07-30T19:30:21.530Z

The nosuid option should be enabled or disabled for all NFS mounts as appropriate

AC-6

CM-6

CM-7

CCE-6462-6

2009-07-30T19:30:21.547Z

The nosgid option should be enabled or disabled for all NFS mounts as appropriate

AC-6

CM-6

CM-7

CCE-6250-5

2009-07-30T19:30:21.563Z

Sendmail should be enabled or disabled as appropriate

CM-6

CCE-6466-7

2009-07-30T19:30:21.577Z

The sendmail banner should be set appropriately.

AC-3

AC-8

CM-6

CCE-6483-2

2009-07-30T19:30:21.593Z

The decode sendmail alias should be enabled or disabled as appropriate.

CM-7

CCE-6408-9

2009-07-30T19:30:21.593Z

.forward files should be allowed or disallowed as appropriate for all users

AC-3

CM-6

CCE-6560-7

2009-07-30T19:30:21.610Z

Programs executed through the aliases file should be owned by an appropriate user

AC-3

CM-6

CCE-6247-1

2009-07-30T19:30:21.627Z

Programs executed through the aliases file should reside a directory with an appropriate user owner

AC-3

CM-6

CCE-5714-1

2009-07-30T19:30:21.640Z

Sendmail vrfy command should be allowed or not as appropriate

CM-6

CCE-6357-8

2009-07-30T19:30:21.640Z

Sendmail expn command should be allowed or not as appropriate

CM-6

CCE-5584-8

2009-07-30T19:30:21.657Z

Sendmail should be configured with an appropriate logging level

CM-6

CCE-6118-4

2009-07-30T19:30:21.670Z

Sendmail help command should be allowed or not as appropriate

CM-6

CCE-6431-1

2009-07-30T19:30:21.687Z

NIS+ server should operate at an appropriate security level

CM-6

CM-7

CCE-6524-3

2009-07-30T19:30:21.687Z

X-Windows should be enabled or disabled as appropriate

CM-6

CM-7

CCE-6435-2

2009-07-30T19:30:21.703Z

Authorized X-clients should be listed or not in the X*.hosts file as appropriate

AC-3

CM-6

CCE-6510-2

2009-07-30T19:30:21.717Z

X-Windows should write .Xauthority files to users' home directories or not as appropriate

CM-6

CM-7

CCE-6558-1

2009-07-30T19:30:21.733Z

X11 forwarding via SSH should be enabled or disabled as appropriate.

CM-6

CM-7

CCE-6025-1

2009-07-30T19:30:21.750Z

Samba should be enabled or disabled as appropriate

AC-3

CM-6

CCE-5748-9

2009-07-30T19:30:21.750Z

Samba 'hosts allow' option should be configured with an appropriate set of networks

AC-3

CM-6

CM-7

SC-5

CCE-6373-5

2009-07-30T19:30:21.767Z

Samba 'security option' option should be set as appropriate

AC-3

CM-6

CCE-5620-0

2009-07-30T19:30:21.780Z

Samba 'encrypt' passwords option should be set as appropriate

AC-3

CM-6

CM-7

SC-5

CCE-6268-7

2009-07-30T19:30:21.797Z

Samba 'smb passwd file' option should be set to an appropriate password file or no password file

AC-3

CM-6

CCE-6501-1

2009-07-30T19:30:21.813Z

IPv6 should be enabled or disabled as appropriate

CM-6

CM-7

CCE-6206-7

2009-07-30T19:30:21.813Z

/dev/kmem file permissions should be set appropriately

AC-3

CM-6

CCE-6602-7

2009-07-30T19:30:21.827Z

/dev/mem file permissions should be set appropriately

AC-3

CM-6

CCE-6571-4

2009-07-30T19:30:21.843Z

/dev/null file permissions should be set appropriately

AC-3

CM-6

CCE-6583-9

2009-07-30T19:30:21.860Z

resolv.conf file permissions should be set appropriately

AC-3

CM-6

CCE-6552-4

2009-07-30T19:30:21.860Z

/etc/named.conf file permissions should be set appropriately

AC-3

CM-6

CCE-6363-6

2009-07-30T19:30:21.877Z

/usr/bin/at file permissions should be set appropriately

AC-3

CM-6

CCE-5623-4

2009-07-30T19:30:21.890Z

/usr/bin/rdist file permissions should be set appropriately

AC-3

CM-6

CCE-5995-6

2009-07-30T19:30:21.907Z

/usr/sbin/sync file permissions should be set appropriately

AC-3

CM-6

CCE-6572-2

2009-07-30T19:30:21.907Z

Superuser account home directories' permissions should be set appropriately

AC-3

CM-6

CCE-5964-2

2009-07-30T19:30:21.920Z

/etc/samba/smb.conf file permissions should be set appropriately

AC-3

CM-6

CCE-6559-9

2009-07-30T19:30:21.937Z

smbpassword executable permissions should be set appropriately

AC-3

CM-6

CCE-5968-3

2009-07-30T19:30:21.953Z

Aliases file permissions should be set appropriately

AC-3

CM-6

CCE-6527-6

2009-07-30T19:30:21.967Z

File permissions should be set as appropriate for the log file configured to capture critical sendmail messages.

AC-3

CM-6

CCE-6245-5

2009-07-30T19:30:21.967Z

All files executed through /etc/aliases file entries should have file permissions set appropriately

AC-3

CM-6

CCE-6384-2

2009-07-30T19:30:21.983Z

/bin/csh file permissions should be set appropriately

AC-3

CM-6

CCE-6371-9

2009-07-30T19:30:22.000Z

/bin/jsh file permissions should be set appropriately

AC-3

CM-6

CCE-6252-1

2009-07-30T19:30:22.017Z

/bin/ksh file permissions should be set appropriately

AC-3

CM-6

CCE-6463-4

2009-07-30T19:30:22.030Z

The /bin/rsh file should exist or not as appropriate

CM-6

CM-7

CCE-6437-8

2009-07-30T19:30:22.030Z

/bin/sh file permissions should be set appropriately

AC-3

CM-6

CCE-5952-7

2009-07-30T19:30:22.047Z

/bin/bash file permissions should be set appropriately

AC-3

CM-6

CCE-5921-2

2009-07-30T19:30:22.063Z

/sbin/csh file permissions should be set appropriately

AC-3

CM-6

CCE-6564-9

2009-07-30T19:30:22.077Z

/sbin/jsh file permissions should be set appropriately

AC-3

CM-6

CCE-6388-3

2009-07-30T19:30:22.077Z

/sbin/ksh file permissions should be set appropriately

AC-3

CM-6

CCE-5636-6

2009-07-30T19:30:22.093Z

The /sbin/rsh file should exist or not as appropriate

CM-6

CM-7

CCE-6130-9

2009-07-30T19:30:22.110Z

/sbin/sh file permissions should be set appropriately

AC-3

CM-6

CCE-6443-6

2009-07-30T19:30:22.127Z

/sbin/bash file permissions should be set appropriately

AC-3

CM-6

CCE-6535-9

2009-07-30T19:30:22.127Z

/usr/bin/csh file permissions should be set appropriately

AC-3

CM-6

CCE-5944-4

2009-07-30T19:30:22.140Z

/usr/bin/jsh file permissions should be set appropriately

AC-3

CM-6

CCE-5650-7

2009-07-30T19:30:22.157Z

/usr/bin/ksh file permissions should be set appropriately

AC-3

CM-6

CCE-6548-2

2009-07-30T19:30:22.170Z

The /usr/bin/rsh file should exist or not as appropriate

CM-6

CM-7

CCE-6253-9

2009-07-30T19:30:22.170Z

/usr/bin/sh file permissions should be set appropriately

AC-3

CM-6

CCE-6240-6

2009-07-30T19:30:22.187Z

/usr/bin/bash file permissions should be set appropriately

AC-3

CM-6

CCE-6531-8

2009-07-30T19:30:22.203Z

snmpd.conf file permissions should be set appropriately

AC-3

CM-6

CCE-6460-0

2009-07-30T19:30:22.217Z

/tmp file permissions should be set appropriately

AC-3

CM-6

CCE-5905-5

2009-07-30T19:30:22.217Z

/usr/tmp file permissions should be set appropriately

AC-3

CM-6

CCE-6002-0

2009-07-30T19:30:22.233Z

.Xauthority file permissions should be set appropriately for all users.

AC-3

CM-6

CCE-6333-9

2009-07-30T19:30:22.250Z

/etc/aliases file permissions should be set appropriately

AC-3

CM-6

CCE-6099-6

2009-07-30T19:30:22.250Z

/etc/cron.d/at.allow file permissions should be set appropriately

AC-3

CM-6

CCE-6332-1

2009-07-30T19:30:22.267Z

/etc/cron.d/cron.allow file permissions should be set appropriately

AC-3

CM-6

CCE-6473-3

2009-07-30T19:30:22.280Z

/etc/csh file permissions should be set appropriately

AC-3

CM-6

CCE-6442-8

2009-07-30T19:30:22.297Z

/etc/default/* file permissions should be set appropriately

AC-3

CM-6

CCE-6129-1

2009-07-30T19:30:22.297Z

/etc/default/login file permissions should be set appropriately

AC-3

CM-6

CCE-6539-1

2009-07-30T19:30:22.313Z

The /etc/ftpusers file should exist or not as appropriate

AC-3

CM-6

CM-7

CCE-6257-0

2009-07-30T19:30:22.327Z

/etc/host.lpd file permissions should be set appropriately

AC-3

CM-6

CCE-6607-6

2009-07-30T19:30:22.343Z

/etc/hostname* file permissions should be set appropriately

AC-3

CM-6

CCE-6576-3

2009-07-30T19:30:22.343Z

/etc/hosts file permissions should be set appropriately

AC-3

CM-6

CCE-5651-5

2009-07-30T19:30:22.360Z

/etc/xinetd.conf file permissions should be set appropriately

AC-3

CM-6

CCE-6475-8

2009-07-30T19:30:22.377Z

/etc/issue file permissions should be set appropriately

AC-3

CM-6

CCE-6281-0

2009-07-30T19:30:22.390Z

/etc/jsh file permissions should be set appropriately

AC-3

CM-6

CCE-6355-2

2009-07-30T19:30:22.390Z

/etc/ksh file permissions should be set appropriately

AC-3

CM-6

CCE-6540-9

2009-07-30T19:30:22.407Z

/etc/mail/aliases file permissions should be set appropriately

AC-3

CM-6

CCE-6241-4

2009-07-30T19:30:22.420Z

/etc/motd file permissions should be set appropriately

AC-3

CM-6

CCE-6509-4

2009-07-30T19:30:22.437Z

/etc/netconfig file permissions should be set appropriately

AC-3

CM-6

CCE-5835-4

2009-07-30T19:30:22.453Z

/etc/notrouter file permissions should be set appropriately

AC-3

CM-6

CCE-6553-2

2009-07-30T19:30:22.453Z

/etc/pam.conf file permissions should be set appropriately

AC-3

CM-6

CCE-6190-3

2009-07-30T19:30:22.467Z

/etc/passwd file permissions should be set appropriately

AC-3

CM-6

CCE-6269-5

2009-07-30T19:30:22.483Z

The /etc/rsh file should exist or not as appropriate

CM-6

CM-7

CCE-6410-5

2009-07-30T19:30:22.500Z

/etc/security file permissions should be set appropriately

AC-3

CM-6

CCE-6625-8

2009-07-30T19:30:22.500Z

/etc/services file permissions should be set appropriately

AC-3

CM-6

CCE-6599-5

2009-07-30T19:30:22.517Z

/etc/sh file permissions should be set appropriately

AC-3

CM-6

CCE-5735-6

2009-07-30T19:30:22.530Z

/etc/shadow file permissions should be set appropriately

AC-3

CM-6

CCE-5652-3

2009-07-30T19:30:22.547Z

/etc/syslog.conf file permissions should be set appropriately

AC-3

CM-6

CCE-6477-4

2009-07-30T19:30:22.547Z

DEPRECATED.

CCE-6569-8

2009-07-30T19:30:22.563Z

/etc/fstab file permissions should be set appropriately

AC-3

CM-6

CCE-6649-8

2009-07-30T19:30:22.577Z

DEPRECATED.

CCE-5911-3

2009-07-30T19:30:22.593Z

/var/adm/loginlog file permissions should be set appropriately

AC-3

CM-6

CCE-6488-1

2009-07-30T19:30:22.593Z

/var/adm/messages file permissions should be set appropriately

AC-3

CM-6

CCE-6395-8

2009-07-30T19:30:22.610Z

/var/adm/sulog file permissions should be set appropriately

AC-3

CM-6

CCE-6492-3

2009-07-30T19:30:22.627Z

/var/adm/utmp file permissions should be set appropriately

AC-3

CM-6

CCE-5654-9

2009-07-30T19:30:22.640Z

/var/adm/wtmp file permissions should be set appropriately

AC-3

CM-6

CCE-6586-2

2009-07-30T19:30:22.640Z

/var/adm/authlog file permissions should be set appropriately

AC-3

CM-6

CCE-6309-9

2009-07-30T19:30:22.657Z

/var/adm/syslog file permissions should be set appropriately

AC-3

CM-6

CCE-6402-2

2009-07-30T19:30:22.670Z

/var/mail file permissions should be set appropriately

AC-3

CM-6

CCE-6401-4

2009-07-30T19:30:22.687Z

/var/tmp file permissions should be set appropriately

AC-3

CM-6

CCE-6370-1

2009-07-30T19:30:22.687Z

/usr/lib/pt_chmod file permissions should be set appropriately

AC-3

CM-6

CCE-5811-5

2009-07-30T19:30:22.703Z

/usr/lib/embedded_us file permissions should be set appropriately

AC-3

CM-6

CCE-6265-3

2009-07-30T19:30:22.717Z

/usr/lib/sendmail file permissions should be set appropriately

AC-3

CM-6

CCE-6591-2

2009-07-30T19:30:22.733Z

/usr/kerberos/bin/rsh file permissions should be set appropriately

AC-3

CM-6

CCE-6608-4

2009-07-30T19:30:22.750Z

/var/spool/mail file permissions should be set appropriately

AC-3

CM-6

CCE-6344-6

2009-07-30T19:30:22.750Z

smbpassword file permissions should be set appropriately

AC-3

CM-6

CCE-6471-7

2009-07-30T19:30:22.767Z

System files should be owned by an appropriate user

AC-3

CM-6

CCE-6061-6

2009-07-30T19:30:22.780Z

System files should be owned by an appropriate group

AC-3

CM-6

CCE-5890-9

2009-07-30T19:30:22.797Z

Default/skeleton dot files should be owned by an appropriate user

AC-3

CM-6

CCE-5657-2

2009-07-30T19:30:22.813Z

Default/skeleton dot files should be owned by an appropriate group

AC-3

CM-6

CCE-6545-8

2009-07-30T19:30:22.827Z

Global initialization files should be owned by an appropriate user

AC-3

CM-6

CCE-6516-9

2009-07-30T19:30:22.827Z

Global initialization files should be owned by an appropriate group

AC-3

CM-6

CCE-6362-8

2009-07-30T19:30:22.843Z

Home directories should be owned by an appropriate user

AC-3

CM-6

CCE-6587-0

2009-07-30T19:30:22.860Z

Home directories should be owned by an appropriate group

AC-3

CM-6

CCE-5850-3

2009-07-30T19:30:22.877Z

inetd.conf file should be owned by an appropriate user

AC-3

CM-6

CCE-6551-6

2009-07-30T19:30:22.890Z

xinetd.conf file should be owned by an appropriate group

AC-3

CM-6

CCE-6397-4

2009-07-30T19:30:22.890Z

/etc/services file should be owned by an appropriate user

AC-3

CM-6

CCE-6555-7

2009-07-30T19:30:22.907Z

/etc/services file should be owned by an appropriate group

AC-3

CM-6

CCE-6621-7

2009-07-30T19:30:22.920Z

/etc/notrouter file should be owned by an appropriate user

AC-3

CM-6

CCE-6396-6

2009-07-30T19:30:22.937Z

/etc/notrouter file should be owned by an appropriate group

AC-3

CM-6

CCE-6352-9

2009-07-30T19:30:22.953Z

DEPRECATED.

CCE-5969-1

2009-07-30T19:30:22.953Z

DEPRECATED.

CCE-5673-9

2009-07-30T19:30:22.967Z

/etc/passwd file should be owned by an appropriate user

AC-3

CM-6

CCE-5824-8

2009-07-30T19:30:22.983Z

/etc/passwd file should be owned by an appropriate group

AC-3

CM-6

CCE-5685-3

2009-07-30T19:30:23.000Z

/etc/shadow file should be owned by an appropriate user

AC-3

CM-6

CCE-5946-9

2009-07-30T19:30:23.017Z

/etc/shadow file should be owned by an appropriate group

AC-3

CM-6

CCE-5694-5

2009-07-30T19:30:23.030Z

Environmental variable PATH for superuser accounts should or should not contain world-writable files as appropriate

AC-3

CM-6

CCE-6421-2

2009-07-30T19:30:23.047Z

Environmental variable PATH for superuser accounts should not contain the current directory as the first or last entry

AC-3

CM-6

CCE-6642-3

2009-07-30T19:30:23.063Z

The current directory should or should not be added to the environmental variable PATH by global initialization files as appropriate

AC-3

CM-6

CCE-6425-3

2009-07-30T19:30:23.063Z

The current directory should or should not be added to the environmental variable PATH by local initialization files as appropriate

AC-3

CM-6

CCE-5699-4

2009-07-30T19:30:23.077Z

Local initialization files should allow or deny access to the terminal as appropriate

CM-7

CCE-5959-2

2009-07-30T19:30:23.093Z

The system umask should be set appropriately

CM-6

CM-7

CCE-6116-8

2009-07-30T19:30:23.110Z

The user umask should be set appropriately

CM-6

CM-7

CCE-6336-2

2009-07-30T19:30:23.127Z

AC-2

CCE-6102-8

2009-07-30T19:30:23.140Z

/etc/init.d file permissions should be set appropriately

AC-3

CM-6

CCE-6679-5

2009-07-30T19:30:23.157Z

/boot/grub/grub.conf file permissions should be set appropriately

AC-3

CM-6

CCE-6653-0

2009-07-30T19:30:23.157Z

/boot/grub/grub.conf file should be owned by an appropriate user

AC-3

CM-6

CCE-6432-9

2009-07-30T19:30:23.170Z

/boot/grub/grub.conf file should be owned by an appropriate group

AC-3

CM-6

CCE-6512-8

2009-07-30T19:30:23.187Z

/etc/lilo.conf file permissions should be set appropriately

AC-3

CM-6

CCE-6212-5

2009-07-30T19:30:23.203Z

/etc/login.access file permissions should be set appropriately

AC-3

CM-6

CCE-6229-9

2009-07-30T19:30:23.203Z

/etc/security/access.conf file permissions should be set appropriately

AC-3

CM-6

CCE-5700-0

2009-07-30T19:30:23.217Z

/etc/sysctl.conf file permissions should be set appropriately

AC-3

CM-6

CCE-6389-1

2009-07-30T19:30:23.233Z

/etc/securetty file permissions should be set appropriately

AC-3

CM-6

CCE-6698-5

2009-07-30T19:30:23.250Z

/etc/audit/auditd.conf file permissions should be set appropriately

AC-3

CM-6

CCE-6420-4

2009-07-30T19:30:23.250Z

audit.rules file permissions should be set appropriately

AU-9

CCE-5953-5

2009-07-30T19:30:23.267Z

DEPRECATED in favor of CCE-8569-6, CCE-7990-5, and CCE-8624-9.

CCE-8569-6

2009-07-30T19:30:23.280Z

/etc/auto.master file should be owned by an appropriate user