An error occurred:

RHEL 7 STIG

Red Hat Enterprise Linux 7 Security Technical Implementation Guide

ID Vuln ID Title Cat Status
RHEL-07-020650 V-204470 The Red Hat Enterprise Linux operating system must be configured so that all local interactive user home directories are group-owned by the home directory owners primary group. Cat II
RHEL-07-020660 V-204471 The Red Hat Enterprise Linux operating system must be configured so that all files and directories contained in local interactive user home directories have a valid owner. Cat II
RHEL-07-020670 V-204472 The Red Hat Enterprise Linux operating system must be configured so that all files and directories contained in local interactive user home directories are group-owned by a group of which the home directory owner is a member. Cat II
RHEL-07-020680 V-204473 The Red Hat Enterprise Linux operating system must be configured so that all files and directories contained in local interactive user home directories have a mode of 0750 or less permissive. Cat II
RHEL-07-020690 V-204474 The Red Hat Enterprise Linux operating system must be configured so that all local initialization files for interactive users are owned by the home directory user or root. Cat II
RHEL-07-020700 V-204475 The Red Hat Enterprise Linux operating system must be configured so that all local initialization files for local interactive users are be group-owned by the users primary group or root. Cat II
RHEL-07-020710 V-204476 The Red Hat Enterprise Linux operating system must be configured so that all local initialization files have mode 0740 or less permissive. Cat II
RHEL-07-020720 V-204477 The Red Hat Enterprise Linux operating system must be configured so that all local interactive user initialization files executable search paths contain only paths that resolve to the users home directory. Cat II
RHEL-07-020730 V-204478 The Red Hat Enterprise Linux operating system must be configured so that local initialization files do not execute world-writable programs. Cat II
RHEL-07-020900 V-204479 The Red Hat Enterprise Linux operating system must be configured so that all system device files are correctly labeled to prevent unauthorized modification. Cat II
RHEL-07-021000 V-204480 The Red Hat Enterprise Linux operating system must be configured so that file systems containing user home directories are mounted to prevent files with the setuid and setgid bit set from being executed. Cat II
RHEL-07-021010 V-204481 The Red Hat Enterprise Linux operating system must prevent files with the setuid and setgid bit set from being executed on file systems that are used with removable media. Cat II
RHEL-07-021020 V-204482 The Red Hat Enterprise Linux operating system must prevent files with the setuid and setgid bit set from being executed on file systems that are being imported via Network File System (NFS). Cat II
RHEL-07-021021 V-204483 The Red Hat Enterprise Linux operating system must prevent binary files from being executed on file systems that are being imported via Network File System (NFS). Cat II
RHEL-07-021024 V-204486 The Red Hat Enterprise Linux operating system must mount /dev/shm with secure options. Cat III

Print

Display this benchmark in a printer-friendly format for off-line reference. This display does not include any commands.

Version Changes

If there are multiple versions of this benchmark, Xylok can display the differences between any changes in the checks.