accepted This guide presents a catalog of security-relevant configuration settings for Ubuntu 24.04 LTS. It is a rendering of content structured in the eXtensible Configuration Checklist Description Format (XCCDF) in order to support security automation. 1.0.0 This profile contains configuration checks that align to the FedRAMP Moderate baseline. root ubuntu-web-01.example.com 192.168.1.101 ubuntu-web-01.example.com 192.168.1.101 Ubuntu 24.04 LTS 85.0 fail CCE-84085-3 Check failed: accounts_password_pam_unix_enabled fail CCE-86367-6 Check failed: accounts_root_gid_zero fail CCE-80542-1 Check failed: accounts_umask_etc_bashrc pass CCE-85756-6 pass CCE-87245-0 pass CCE-84229-6 pass CCE-85530-9 pass CCE-86612-5 pass CCE-83872-0 pass CCE-80112-6 pass CCE-89996-5 pass CCE-85579-2 pass CCE-80759-8 pass CCE-89911-0 pass CCE-84992-1 pass CCE-87795-2 pass CCE-85707-5 pass CCE-82032-0 pass CCE-81268-1 fail CCE-88213-5 Check failed: sshd_use_strong_kex pass CCE-83019-3 pass CCE-87051-7 pass CCE-82072-8 fail CCE-89123-1 Check failed: set_password_hashing_algorithm_logindefs pass CCE-87054-8 pass CCE-87547-0 pass CCE-81067-4 pass CCE-84337-6 fail CCE-81697-1 Check failed: accounts_password_last_change_is_in_past pass CCE-80813-5 pass CCE-88582-0 pass CCE-88166-1 pass CCE-81675-4 pass CCE-86211-1 pass CCE-89834-5 pass CCE-87543-6 pass CCE-82981-6 fail CCE-89911-7 Check failed: accounts_password_pam_minclass pass CCE-83046-1 pass CCE-82620-6 pass CCE-81618-9 pass CCE-84373-1 pass CCE-85809-1 pass CCE-88053-3 fail CCE-84794-3 Check failed: accounts_password_pam_ucredit pass CCE-81473-9 pass CCE-89680-5 pass CCE-81472-0 pass CCE-87201-1 pass CCE-81695-4 pass CCE-89604-7 pass CCE-83626-2 pass CCE-82346-8 pass CCE-88604-4 pass CCE-81620-3 pass CCE-89144-4 pass CCE-89353-4 pass CCE-89786-6 pass CCE-88769-7 fail CCE-87317-9 Check failed: sudo_remove_no_authenticate pass CCE-85592-1 pass CCE-80502-2 pass CCE-82663-8 fail CCE-81078-6 Check failed: accounts_passwords_pam_faillock_enabled pass CCE-86298-7 pass CCE-82359-8 fail CCE-86804-6 Check failed: sshd_set_loglevel_info pass CCE-85724-7 fail CCE-87523-3 Check failed: sudo_custom_logfile fail CCE-89922-5 Check failed: account_automated_provisioning_enabled pass CCE-84671-4 pass CCE-84841-5 pass CCE-81351-1 pass CCE-87858-6 pass CCE-83098-4 fail CCE-83793-7 Check failed: screen_lock_pattern_hiding_enabled pass CCE-88338-9 pass CCE-82213-9 pass CCE-83512-2 fail CCE-81231-1 Check failed: change_control_documentation_required fail CCE-81745-2 Check failed: service_periodic_review_enabled pass CCE-81005-2 pass CCE-85170-5 pass CCE-85190-8 pass CCE-86649-3 pass CCE-84376-1 pass CCE-86102-3 pass CCE-88792-6 pass CCE-85174-6 pass CCE-86933-3 pass CCE-85848-8 pass CCE-86846-8 pass CCE-81888-7