An error occurred:

Red Hat Enterprise Linux 7 STIG

Red Hat Enterprise Linux 7 Security Technical Implementation Guide

ID Vuln ID Title Cat Status
RHEL-07-010491 V-204440 Red Hat Enterprise Linux operating systems version 7.2 or newer using Unified Extensible Firmware Interface (UEFI) must require authentication upon booting into single-user and maintenance modes. Cat I
RHEL-07-010492 V-244558 Red Hat Enterprise Linux operating systems version 7.2 or newer booted with United Extensible Firmware Interface (UEFI) must have a unique name for the grub superusers account when booting into single-user mode and maintenance. Cat II
RHEL-07-010500 V-204441 The Red Hat Enterprise Linux operating system must uniquely identify and must authenticate organizational users (or processes acting on behalf of organizational users) using multifactor authentication. Cat II
RHEL-07-020000 V-204442 The Red Hat Enterprise Linux operating system must not have the rsh-server package installed. Cat I
RHEL-07-020010 V-204443 The Red Hat Enterprise Linux operating system must not have the ypserv package installed. Cat I
RHEL-07-020019 V-214800 The Red Hat Enterprise Linux operating system must implement the Endpoint Security for Linux Threat Prevention tool. Cat II
RHEL-07-020020 V-204444 The Red Hat Enterprise Linux operating system must prevent nonprivileged users from executing privileged functions to include disabling, circumventing, or altering implemented security safeguards/countermeasures. Cat II
RHEL-07-020021 V-250312 The Red Hat Enterprise Linux operating system must confine SELinux users to roles that conform to least privilege. Cat II
RHEL-07-020022 V-250313 The Red Hat Enterprise Linux operating system must not allow privileged accounts to utilize SSH. Cat II
RHEL-07-020023 V-250314 The Red Hat Enterprise Linux operating system must elevate the SELinux context when an administrator calls the sudo command. Cat II
RHEL-07-020028 V-256970 The Red Hat Enterprise Linux operating system must be configured to allow sending email notifications of configuration changes and adverse events to designated personnel. Cat II
RHEL-07-020029 V-251705 The Red Hat Enterprise Linux operating system must use a file integrity tool to verify correct operation of all security functions. Cat II
RHEL-07-020030 V-204445 The Red Hat Enterprise Linux operating system must be configured so that a file integrity tool verifies the baseline operating system configuration at least weekly. Cat II
RHEL-07-020040 V-204446 The Red Hat Enterprise Linux operating system must be configured so that designated personnel are notified if baseline configurations are changed in an unauthorized manner. Cat II
RHEL-07-020050 V-204447 The Red Hat Enterprise Linux operating system must prevent the installation of software, patches, service packs, device drivers, or operating system components from a repository without verification they have been digitally signed using a certificate that is issued by a Certificate Authority (CA) that is recognized and approved by the organization. Cat I

Print

Display this benchmark in a printer-friendly format for off-line reference. This display does not include any commands.

Version Changes

If there are multiple versions of this benchmark, Xylok can display the differences between any changes in the checks.