+SYS.1.3.A16 Additional Prevention of Further Intrusion When Vulnerabilities Are Exploited (H)

SYS.1.3.A16 Additional Prevention of Further Intrusion When Vulnerabilities Are Exploited (H)

The use of system calls SHOULD be limited to those absolutely necessary, particularly for exposed services and applications. The standard profiles and/or rules (e.g. of SELinux or AppArmor) SHOULD be checked manually and, if necessary, adapted to an organisation's own security policies. If necessary, new rules and profiles SHOULD be drawn up.

1. Panoramica

1.1 Riferimenti

1.2 Requisiti identificati

1.3 Regolamentazioni correlate

2. Requisiti identificati

Requisiti

3. Regolamentazioni correlate

Regolamentazioni

Ticket collegati

Collegamenti
blocks G 0.14 Interception of Information / Espionage
blocks G 0.22 Manipulation of Information
blocks G 0.32 Misuse of Authorisation
blocks G 0.45 Data Loss