name: operating-system
packages:
- operating-system
rules:
- accounts_tmout
- accounts_user_home_paths_only
- accounts_user_interactive_home_directory_defined
- accounts_user_interactive_home_directory_exists
- bios_assign_password
- bios_disable_usb_boot
- bios_enable_execution_restrictions
- configure_user_data_backups
- disable_prelink
- encrypt_partitions
- ensure_iptables_are_flushed
- file_groupownership_home_directories
- file_permission_user_init_files
- file_permission_user_init_files_root
- file_permissions_home_directories
- file_permissions_home_dirs
- has_nonlocal_mta
- install_antivirus
- install_endpoint_security_software
- install_hids
- installed_OS_is_FIPS_certified
- installed_OS_is_vendor_supported
- ip6tables_rules_for_open_ports
- iptables_rules_for_open_ports
- mask_nonessential_services
- network_configure_name_resolution
- network_disable_ddns_interfaces
- network_disable_zeroconf
- network_nmcli_permissions
- network_sniffer_disabled
- no_forward_files
- no_host_based_files
- no_rsh_trust_files
- no_user_host_based_files
- prefer_64bit_os
- root_path_no_dot
- set_ip6tables_default_rule
- set_iptables_default_rule
- set_iptables_default_rule_forward
- set_iptables_outbound_n_established
- set_ipv6_loopback_traffic
- set_loopback_traffic
- umask_for_daemons
- wireless_disable_in_bios
- wireless_disable_interfaces
