An error occurred:

RHEL 7 STIG

Red Hat Enterprise Linux 7 Security Technical Implementation Guide

ID Vuln ID Title Cat Status
RHEL-07-030840 V-204563 The Red Hat Enterprise Linux operating system must audit all uses of the kmod command. Cat II
RHEL-07-030870 V-204564 The Red Hat Enterprise Linux operating system must generate audit records for all account creations, modifications, disabling, and termination events that affect /etc/passwd. Cat II
RHEL-07-030871 V-204565 The Red Hat Enterprise Linux operating system must generate audit records for all account creations, modifications, disabling, and termination events that affect /etc/group. Cat II
RHEL-07-030872 V-204566 The Red Hat Enterprise Linux operating system must generate audit records for all account creations, modifications, disabling, and termination events that affect /etc/gshadow. Cat II
RHEL-07-030873 V-204567 The Red Hat Enterprise Linux operating system must generate audit records for all account creations, modifications, disabling, and termination events that affect /etc/shadow. Cat II
RHEL-07-030874 V-204568 The Red Hat Enterprise Linux operating system must generate audit records for all account creations, modifications, disabling, and termination events that affect /etc/security/opasswd. Cat II
RHEL-07-030910 V-204572 The Red Hat Enterprise Linux operating system must audit all uses of the unlink, unlinkat, rename, renameat, and rmdir syscalls. Cat II
RHEL-07-031000 V-204574 The Red Hat Enterprise Linux operating system must send rsyslog output to a log aggregation server. Cat II
RHEL-07-031010 V-204575 The Red Hat Enterprise Linux operating system must be configured so that the rsyslog daemon does not accept log messages from other servers unless the server is being used for log aggregation. Cat II
RHEL-07-032000 V-214801 The Red Hat Enterprise Linux operating system must use a virus scan program. Cat I
RHEL-07-040000 V-204576 The Red Hat Enterprise Linux operating system must limit the number of concurrent sessions to 10 for all accounts and/or account types. Cat III
RHEL-07-040100 V-204577 The Red Hat Enterprise Linux operating system must be configured to prohibit or restrict the use of functions, ports, protocols, and/or services, as defined in the Ports, Protocols, and Services Management Component Local Service Assessment (PPSM CLSA) and vulnerability assessments. Cat II
RHEL-07-040110 V-204578 The Red Hat Enterprise Linux 7 operating system must implement DoD-approved encryption to protect the confidentiality of SSH connections. Cat II
RHEL-07-040160 V-204579 The Red Hat Enterprise Linux operating system must be configured so that all network connections associated with a communication session are terminated at the end of the session or after 15 minutes of inactivity from the user at a command prompt, except to fulfill documented and validated mission requirements. Cat II
RHEL-07-040170 V-204580 The Red Hat Enterprise Linux operating system must display the Standard Mandatory DoD Notice and Consent Banner immediately prior to, or as part of, remote access logon prompts. Cat II

Print

Display this benchmark in a printer-friendly format for off-line reference. This display does not include any commands.

Version Changes

If there are multiple versions of this benchmark, Xylok can display the differences between any changes in the checks.