An error occurred:

Red Hat Enterprise Linux 7 STIG

Red Hat Enterprise Linux 7 Security Technical Implementation Guide

ID Vuln ID Title Cat Status
RHEL-07-031010 V-204575 The Red Hat Enterprise Linux operating system must be configured so that the rsyslog daemon does not accept log messages from other servers unless the server is being used for log aggregation. Cat II
RHEL-07-032000 V-214801 The Red Hat Enterprise Linux operating system must use a virus scan program. Cat I
RHEL-07-040000 V-204576 The Red Hat Enterprise Linux operating system must limit the number of concurrent sessions to 10 for all accounts and/or account types. Cat III
RHEL-07-040100 V-204577 The Red Hat Enterprise Linux operating system must be configured to prohibit or restrict the use of functions, ports, protocols, and/or services, as defined in the Ports, Protocols, and Services Management Component Local Service Assessment (PPSM CLSA) and vulnerability assessments. Cat II
RHEL-07-040110 V-204578 The Red Hat Enterprise Linux 7 operating system must implement DoD-approved encryption to protect the confidentiality of SSH connections. Cat II
RHEL-07-040160 V-204579 The Red Hat Enterprise Linux operating system must be configured so that all network connections associated with a communication session are terminated at the end of the session or after 15 minutes of inactivity from the user at a command prompt, except to fulfill documented and validated mission requirements. Cat II
RHEL-07-040170 V-204580 The Red Hat Enterprise Linux operating system must display the Standard Mandatory DoD Notice and Consent Banner immediately prior to, or as part of, remote access logon prompts. Cat II
RHEL-07-040180 V-204581 The Red Hat Enterprise Linux operating system must implement cryptography to protect the integrity of Lightweight Directory Access Protocol (LDAP) authentication communications. Cat II
RHEL-07-040190 V-204582 The Red Hat Enterprise Linux operating system must implement cryptography to protect the integrity of Lightweight Directory Access Protocol (LDAP) communications. Cat II
RHEL-07-040200 V-204583 The Red Hat Enterprise Linux operating system must implement cryptography to protect the integrity of Lightweight Directory Access Protocol (LDAP) communications. Cat II
RHEL-07-040201 V-204584 The Red Hat Enterprise Linux operating system must implement virtual address space randomization. Cat II
RHEL-07-040300 V-204585 The Red Hat Enterprise Linux operating system must be configured so that all networked systems have SSH installed. Cat II
RHEL-07-040310 V-204586 The Red Hat Enterprise Linux operating system must be configured so that all networked systems use SSH for confidentiality and integrity of transmitted and received information as well as information during preparation for transmission. Cat II
RHEL-07-040320 V-204587 The Red Hat Enterprise Linux operating system must be configured so that all network connections associated with SSH traffic are terminated after 10 minutes of becoming unresponsive. Cat II
RHEL-07-040330 V-204588 The Red Hat Enterprise Linux operating system must be configured so that the SSH daemon does not allow authentication using RSA rhosts authentication. Cat II

Print

Display this benchmark in a printer-friendly format for off-line reference. This display does not include any commands.

Version Changes

If there are multiple versions of this benchmark, Xylok can display the differences between any changes in the checks.