An error occurred:

RHEL 7 STIG

Red Hat Enterprise Linux 7 Security Technical Implementation Guide

ID Vuln ID Title Cat Status
RHEL-07-021700 V-204501 The Red Hat Enterprise Linux operating system must not allow removable media to be used as the boot loader unless approved. Cat II
RHEL-07-021710 V-204502 The Red Hat Enterprise Linux operating system must not have the telnet-server package installed. Cat I
RHEL-07-030000 V-204503 The Red Hat Enterprise Linux operating system must be configured so that auditing is configured to produce records containing information to establish what type of events occurred, where the events occurred, the source of the events, and the outcome of the events. These audit records must also identify individual identities of group account users. Cat II
RHEL-07-030010 V-204504 The Red Hat Enterprise Linux operating system must shut down upon audit processing failure, unless availability is an overriding concern. If availability is a concern, the system must alert the designated staff (System Administrator [SA] and Information System Security Officer [ISSO] at a minimum) in the event of an audit processing failure. Cat II
RHEL-07-030201 V-204506 The Red Hat Enterprise Linux operating system must be configured to off-load audit logs onto a different system or storage media from the system being audited. Cat II
RHEL-07-030210 V-204507 The Red Hat Enterprise Linux operating system must take appropriate action when the remote logging buffer is full. Cat II
RHEL-07-030211 V-204508 The Red Hat Enterprise Linux operating system must label all off-loaded audit logs before sending them to the central log server. Cat II
RHEL-07-030300 V-204509 The Red Hat Enterprise Linux operating system must off-load audit records onto a different system or media from the system being audited. Cat II
RHEL-07-030310 V-204510 The Red Hat Enterprise Linux operating system must encrypt the transfer of audit records off-loaded onto a different system or media from the system being audited. Cat II
RHEL-07-030320 V-204511 The Red Hat Enterprise Linux operating system must be configured so that the audit system takes appropriate action when the audit storage volume is full. Cat II
RHEL-07-030321 V-204512 The Red Hat Enterprise Linux operating system must be configured so that the audit system takes appropriate action when there is an error sending audit records to a remote system. Cat II
RHEL-07-030330 V-204513 The Red Hat Enterprise Linux operating system must initiate an action to notify the System Administrator (SA) and Information System Security Officer ISSO, at a minimum, when allocated audit record storage volume reaches 75% of the repository maximum audit record storage capacity. Cat II
RHEL-07-030340 V-204514 The Red Hat Enterprise Linux operating system must immediately notify the System Administrator (SA) and Information System Security Officer (ISSO) (at a minimum) via email when the threshold for the repository maximum audit record storage capacity is reached. Cat II
RHEL-07-030350 V-204515 The Red Hat Enterprise Linux operating system must immediately notify the System Administrator (SA) and Information System Security Officer (ISSO) (at a minimum) when the threshold for the repository maximum audit record storage capacity is reached. Cat II
RHEL-07-030360 V-204516 The Red Hat Enterprise Linux operating system must audit all executions of privileged functions. Cat II

Print

Display this benchmark in a printer-friendly format for off-line reference. This display does not include any commands.

Version Changes

If there are multiple versions of this benchmark, Xylok can display the differences between any changes in the checks.