accepted This guide presents a catalog of security-relevant configuration settings for Ubuntu 24.04 LTS. It is a rendering of content structured in the eXtensible Configuration Checklist Description Format (XCCDF) in order to support security automation. 1.0.0 This profile contains configuration checks that align to the FedRAMP Moderate baseline. root ubuntu-db-01.example.com 192.168.1.103 ubuntu-db-01.example.com 192.168.1.103 Ubuntu 24.04 LTS 90.0 pass CCE-85985-6 pass CCE-81513-5 pass CCE-88180-8 pass CCE-86742-6 pass CCE-88535-9 pass CCE-87515-6 pass CCE-84759-8 pass CCE-89614-1 pass CCE-85025-1 pass CCE-89655-1 pass CCE-85118-2 pass CCE-80578-3 pass CCE-81545-3 pass CCE-85602-4 pass CCE-83719-8 pass CCE-84822-7 pass CCE-85843-2 pass CCE-88350-0 pass CCE-82938-0 fail CCE-82567-3 Check failed: sshd_use_strong_kex pass CCE-85411-2 pass CCE-81690-2 pass CCE-83227-4 pass CCE-83542-2 fail CCE-89544-0 Check failed: set_password_hashing_algorithm_systemauth fail CCE-82377-2 Check failed: account_disable_post_pw_expiration fail CCE-80852-6 Check failed: accounts_maximum_age_login_defs pass CCE-86453-5 fail CCE-81901-6 Check failed: accounts_password_last_change_is_in_past pass CCE-83692-6 pass CCE-87327-9 pass CCE-84228-9 pass CCE-80082-4 pass CCE-83867-5 fail CCE-87909-4 Check failed: accounts_password_pam_lcredit fail CCE-87390-3 Check failed: accounts_password_pam_maxrepeat pass CCE-87969-0 pass CCE-85069-8 pass CCE-88257-2 pass CCE-83367-7 pass CCE-87160-9 pass CCE-86198-2 pass CCE-84622-3 pass CCE-80878-0 pass CCE-88564-6 fail CCE-87244-2 Check failed: accounts_password_pam_unix_no_remember pass CCE-86027-1 pass CCE-81864-8 pass CCE-82578-5 pass CCE-82746-9 pass CCE-81224-0 pass CCE-89152-5 pass CCE-81871-6 pass CCE-85523-7 pass CCE-87361-0 pass CCE-83336-6 pass CCE-84694-8 pass CCE-80142-8 pass CCE-83710-0 pass CCE-83643-2 pass CCE-81243-8 fail CCE-89156-7 Check failed: sudo_require_reauthentication pass CCE-86363-9 pass CCE-87812-6 pass CCE-82976-4 pass CCE-87395-7 fail CCE-89761-6 Check failed: sshd_set_loglevel_info pass CCE-85877-3 fail CCE-86823-0 Check failed: sudo_custom_logfile pass CCE-84707-9 pass CCE-85165-1 pass CCE-85347-9 pass CCE-88739-1 pass CCE-88089-8 pass CCE-88284-2 pass CCE-83228-6 pass CCE-83185-2 pass CCE-89621-7 pass CCE-88564-1 pass CCE-86535-4 pass CCE-88045-4 pass CCE-86478-2 pass CCE-85279-8 pass CCE-82683-2 fail CCE-87173-9 Check failed: privileged_command_network_restriction pass CCE-81750-6 pass CCE-84041-3 pass CCE-88977-2 pass CCE-87816-4 pass CCE-84345-2 pass CCE-86940-1 pass CCE-87523-6 pass CCE-83139-1