accepted This guide presents a catalog of security-relevant configuration settings for Ubuntu 24.04 LTS. It is a rendering of content structured in the eXtensible Configuration Checklist Description Format (XCCDF) in order to support security automation. 1.0.0 This profile contains configuration checks that align to the FedRAMP Moderate baseline. root ubuntu-app-01.example.com 192.168.1.104 ubuntu-app-01.example.com 192.168.1.104 Ubuntu 24.04 LTS 75.0 pass CCE-89401-7 fail CCE-81949-6 Check failed: accounts_root_gid_zero pass CCE-87060-2 fail CCE-82986-2 Check failed: accounts_umask_etc_login_defs pass CCE-87670-9 pass CCE-82901-8 pass CCE-81729-4 fail CCE-84170-2 Check failed: ensure_root_access_controlled fail CCE-81996-0 Check failed: file_groupowner_sshd_config fail CCE-85248-2 Check failed: file_owner_sshd_config pass CCE-80900-1 fail CCE-81755-3 Check failed: file_permissions_sshd_private_key pass CCE-86232-7 pass CCE-87905-4 pass CCE-84190-6 pass CCE-80162-9 fail CCE-88300-8 Check failed: sshd_limit_user_access pass CCE-82067-4 fail CCE-86457-6 Check failed: sshd_use_strong_ciphers pass CCE-85989-4 pass CCE-86894-9 pass CCE-87090-6 pass CCE-87870-8 pass CCE-88967-0 pass CCE-81320-5 pass CCE-87892-3 pass CCE-82000-1 pass CCE-80737-1 fail CCE-87458-3 Check failed: accounts_password_last_change_is_in_past pass CCE-80662-9 pass CCE-81416-8 pass CCE-86720-3 pass CCE-89501-9 pass CCE-83314-3 pass CCE-82846-0 pass CCE-88282-3 pass CCE-86291-8 pass CCE-82206-5 pass CCE-81900-1 fail CCE-85479-1 Check failed: accounts_password_pam_ocredit pass CCE-83920-0 pass CCE-80180-3 pass CCE-87704-9 fail CCE-88128-3 Check failed: accounts_password_pam_pwquality_enabled pass CCE-89208-9 pass CCE-86440-3 pass CCE-86826-7 pass CCE-87468-5 pass CCE-81073-5 pass CCE-80524-6 pass CCE-85060-2 pass CCE-88952-9 pass CCE-84354-8 fail CCE-81903-0 Check failed: accounts_password_warn_age_login_defs pass CCE-84937-6 fail CCE-89151-2 Check failed: accounts_tmout pass CCE-83850-9 pass CCE-80414-5 pass CCE-86387-3 fail CCE-80990-3 Check failed: sudo_remove_no_authenticate pass CCE-89355-9 pass CCE-80434-4 pass CCE-87128-1 pass CCE-87661-4 pass CCE-81636-2 pass CCE-87928-3 fail CCE-81655-9 Check failed: sshd_set_loglevel_info pass CCE-89966-1 fail CCE-82215-4 Check failed: sudo_custom_logfile fail CCE-84235-4 Check failed: account_automated_provisioning_enabled pass CCE-84831-8 pass CCE-88875-8 pass CCE-83696-9 pass CCE-89447-4 fail CCE-86048-0 Check failed: screen_lock_timeout_configured fail CCE-82328-6 Check failed: screen_lock_pattern_hiding_enabled fail CCE-86642-5 Check failed: sshd_logging_enabled fail CCE-87947-5 Check failed: auditd_extended_information_enabled pass CCE-81539-2 fail CCE-81898-7 Check failed: change_control_documentation_required pass CCE-85603-7 pass CCE-88170-4 fail CCE-85363-7 Check failed: intrusion_detection_tool_installed fail CCE-87986-2 Check failed: encrypted_traffic_inspection_configured fail CCE-85443-7 Check failed: privileged_command_network_restriction pass CCE-88131-2 pass CCE-88957-8 pass CCE-87478-4 pass CCE-84551-2 pass CCE-87762-0 fail CCE-88751-0 Check failed: audit_logs_encrypted pass CCE-88584-1 pass CCE-85977-3