An error occurred:

RHEL 7 STIG

Red Hat Enterprise Linux 7 Security Technical Implementation Guide

ID Vuln ID Title Cat Status
RHEL-07-040612 V-204611 The Red Hat Enterprise Linux operating system must use a reverse-path filter for IPv4 network traffic when possible by default. Cat II
RHEL-07-040620 V-204612 The Red Hat Enterprise Linux operating system must not forward Internet Protocol version 4 (IPv4) source-routed packets by default. Cat II
RHEL-07-040630 V-204613 The Red Hat Enterprise Linux operating system must not respond to Internet Protocol version 4 (IPv4) Internet Control Message Protocol (ICMP) echoes sent to a broadcast address. Cat II
RHEL-07-040640 V-204614 The Red Hat Enterprise Linux operating system must prevent Internet Protocol version 4 (IPv4) Internet Control Message Protocol (ICMP) redirect messages from being accepted. Cat II
RHEL-07-040641 V-204615 The Red Hat Enterprise Linux operating system must ignore Internet Protocol version 4 (IPv4) Internet Control Message Protocol (ICMP) redirect messages. Cat II
RHEL-07-040650 V-204616 The Red Hat Enterprise Linux operating system must not allow interfaces to perform Internet Protocol version 4 (IPv4) Internet Control Message Protocol (ICMP) redirects by default. Cat II
RHEL-07-040660 V-204617 The Red Hat Enterprise Linux operating system must not send Internet Protocol version 4 (IPv4) Internet Control Message Protocol (ICMP) redirects. Cat II
RHEL-07-040670 V-204618 Network interfaces configured on the Red Hat Enterprise Linux operating system must not be in promiscuous mode. Cat II
RHEL-07-040680 V-204619 The Red Hat Enterprise Linux operating system must be configured to prevent unrestricted mail relaying. Cat II
RHEL-07-040690 V-204620 The Red Hat Enterprise Linux operating system must not have a File Transfer Protocol (FTP) server package installed unless needed. Cat I
RHEL-07-040700 V-204621 The Red Hat Enterprise Linux operating system must not have the Trivial File Transfer Protocol (TFTP) server package installed if not required for operational support. Cat I
RHEL-07-040710 V-204622 The Red Hat Enterprise Linux operating system must be configured so that remote X connections are disabled except to fulfill documented and validated mission requirements. Cat II
RHEL-07-040711 V-233307 The Red Hat Enterprise Linux operating system SSH daemon must prevent remote hosts from connecting to the proxy display. Cat II
RHEL-07-040720 V-204623 The Red Hat Enterprise Linux operating system must be configured so that if the Trivial File Transfer Protocol (TFTP) server is required, the TFTP daemon is configured to operate in secure mode. Cat II
RHEL-07-040730 V-204624 The Red Hat Enterprise Linux operating system must not have a graphical display manager installed unless approved. Cat II

Print

Display this benchmark in a printer-friendly format for off-line reference. This display does not include any commands.

Version Changes

If there are multiple versions of this benchmark, Xylok can display the differences between any changes in the checks.