An error occurred:

Red Hat Enterprise Linux 7 STIG

Red Hat Enterprise Linux 7 Security Technical Implementation Guide

ID Vuln ID Title Cat Status
RHEL-07-010220 V-204417 The Red Hat Enterprise Linux operating system must be configured so that user and group account administration utilities are configured to store only encrypted representations of passwords. Cat II
RHEL-07-010230 V-204418 The Red Hat Enterprise Linux operating system must be configured so that passwords for new users are restricted to a 24 hours/1 day minimum lifetime. Cat II
RHEL-07-010240 V-204419 The Red Hat Enterprise Linux operating system must be configured so that passwords are restricted to a 24 hours/1 day minimum lifetime. Cat II
RHEL-07-010250 V-204420 The Red Hat Enterprise Linux operating system must be configured so that passwords for new users are restricted to a 60-day maximum lifetime. Cat II
RHEL-07-010260 V-204421 The Red Hat Enterprise Linux operating system must be configured so that existing passwords are restricted to a 60-day maximum lifetime. Cat II
RHEL-07-010270 V-204422 The Red Hat Enterprise Linux operating system must be configured so that passwords are prohibited from reuse for a minimum of five generations. Cat II
RHEL-07-010271 V-254523 The Red Hat Enterprise Linux operating system must automatically expire temporary accounts within 72 hours. Cat II
RHEL-07-010280 V-204423 The Red Hat Enterprise Linux operating system must be configured so that passwords are a minimum of 15 characters in length. Cat II
RHEL-07-010290 V-204424 The Red Hat Enterprise Linux operating system must not allow accounts configured with blank or null passwords. Cat I
RHEL-07-010291 V-251702 The Red Hat Enterprise Linux operating system must not have accounts configured with blank or null passwords. Cat I
RHEL-07-010300 V-204425 The Red Hat Enterprise Linux operating system must be configured so that the SSH daemon does not allow authentication using an empty password. Cat I
RHEL-07-010310 V-204426 The Red Hat Enterprise Linux operating system must disable account identifiers (individuals, groups, roles, and devices) if the password expires. Cat II
RHEL-07-010320 V-204427 The Red Hat Enterprise Linux operating system must be configured to lock accounts for a minimum of 15 minutes after three unsuccessful logon attempts within a 15-minute timeframe. Cat II
RHEL-07-010330 V-204428 The Red Hat Enterprise Linux operating system must lock the associated account after three unsuccessful root logon attempts are made within a 15-minute period. Cat II
RHEL-07-010339 V-251703 The Red Hat Enterprise Linux operating system must specify the default "include" directory for the /etc/sudoers file. Cat II

Print

Display this benchmark in a printer-friendly format for off-line reference. This display does not include any commands.

Version Changes

If there are multiple versions of this benchmark, Xylok can display the differences between any changes in the checks.