accepted This guide presents a catalog of security-relevant configuration settings for Ubuntu 24.04 LTS. It is a rendering of content structured in the eXtensible Configuration Checklist Description Format (XCCDF) in order to support security automation. 1.0.0 This profile contains configuration checks that align to the FedRAMP Moderate baseline. root ubuntu-web-02.example.com 192.168.1.102 ubuntu-web-02.example.com 192.168.1.102 Ubuntu 24.04 LTS 80.0 pass CCE-87879-3 pass CCE-89459-1 fail CCE-83572-1 Check failed: accounts_umask_etc_bashrc pass CCE-82228-4 fail CCE-82062-7 Check failed: accounts_umask_etc_profile pass CCE-80311-5 fail CCE-86626-7 Check failed: ensure_pam_wheel_group_empty pass CCE-85588-7 pass CCE-84919-3 pass CCE-85149-1 pass CCE-87407-2 fail CCE-82706-7 Check failed: file_permissions_sshd_private_key pass CCE-86746-6 pass CCE-87352-5 fail CCE-88396-7 Check failed: no_invalid_shell_accounts_unlocked pass CCE-85042-8 pass CCE-82636-1 pass CCE-89798-3 pass CCE-83943-0 pass CCE-84890-9 pass CCE-88717-9 pass CCE-83279-7 pass CCE-82810-7 pass CCE-83308-0 fail CCE-86501-8 Check failed: set_password_hashing_algorithm_systemauth pass CCE-80228-3 pass CCE-89587-6 pass CCE-83169-8 pass CCE-88664-2 pass CCE-85912-1 pass CCE-80473-7 fail CCE-81882-3 Check failed: accounts_password_pam_difok pass CCE-81299-5 pass CCE-85249-4 pass CCE-84397-2 pass CCE-87001-1 pass CCE-84836-5 pass CCE-83271-9 pass CCE-86176-8 fail CCE-88765-7 Check failed: accounts_password_pam_ocredit pass CCE-85798-1 pass CCE-87799-9 pass CCE-85654-1 pass CCE-81365-0 pass CCE-83490-2 pass CCE-81649-5 pass CCE-80197-5 fail CCE-82390-1 Check failed: accounts_password_set_min_life_existing pass CCE-80698-7 pass CCE-80619-0 pass CCE-87658-1 pass CCE-86336-1 pass CCE-80908-9 pass CCE-89641-8 fail CCE-87203-7 Check failed: sshd_disable_forwarding fail CCE-84337-0 Check failed: accounts_tmout pass CCE-89965-9 pass CCE-81218-2 pass CCE-82082-5 pass CCE-80178-5 pass CCE-84298-3 pass CCE-81182-3 pass CCE-83493-4 fail CCE-84656-5 Check failed: accounts_passwords_pam_faillock_enabled pass CCE-86292-7 fail CCE-88463-6 Check failed: accounts_passwords_pam_faillock_unlock_time fail CCE-83507-8 Check failed: sshd_set_loglevel_info pass CCE-84346-0 fail CCE-85990-5 Check failed: sudo_custom_logfile fail CCE-89244-1 Check failed: account_automated_provisioning_enabled pass CCE-82762-0 pass CCE-85456-7 fail CCE-88878-0 Check failed: sudo_security_function_authorization pass CCE-81361-4 pass CCE-83510-6 pass CCE-82321-2 pass CCE-82065-5 fail CCE-88562-2 Check failed: auditd_extended_information_enabled pass CCE-85337-0 pass CCE-81056-8 pass CCE-83208-4 pass CCE-85980-9 pass CCE-87794-4 pass CCE-84817-7 pass CCE-85773-8 pass CCE-87799-8 pass CCE-88548-2 fail CCE-86325-6 Check failed: auditd_realtime_alerts_enabled pass CCE-88471-3 pass CCE-89035-3 fail CCE-88900-9 Check failed: audit_logs_encrypted pass CCE-88459-3 fail CCE-82806-3 Check failed: time_synchronization_configured