An error occurred:

Red Hat Enterprise Linux 7 STIG

Red Hat Enterprise Linux 7 Security Technical Implementation Guide

ID Vuln ID Title Cat Status
RHEL-07-021320 V-204494 The Red Hat Enterprise Linux operating system must use a separate file system for /var. Cat III
RHEL-07-021330 V-204495 The Red Hat Enterprise Linux operating system must use a separate file system for the system audit data path. Cat III
RHEL-07-021340 V-204496 The Red Hat Enterprise Linux operating system must use a separate file system for /tmp (or equivalent). Cat III
RHEL-07-021350 V-204497 The Red Hat Enterprise Linux operating system must implement NIST FIPS-validated cryptography for the following: to provision digital signatures, to generate cryptographic hashes, and to protect data requiring data-at-rest protections in accordance with applicable federal laws, Executive Orders, directives, policies, regulations, and standards. Cat I
RHEL-07-021600 V-204498 The Red Hat Enterprise Linux operating system must be configured so that the file integrity tool is configured to verify Access Control Lists (ACLs). Cat III
RHEL-07-021610 V-204499 The Red Hat Enterprise Linux operating system must be configured so that the file integrity tool is configured to verify extended attributes. Cat III
RHEL-07-021620 V-204500 The Red Hat Enterprise Linux operating system must use a file integrity tool that is configured to use FIPS 140-2 approved cryptographic hashes for validating file contents and directories. Cat II
RHEL-07-021700 V-204501 The Red Hat Enterprise Linux operating system must not allow removable media to be used as the boot loader unless approved. Cat II
RHEL-07-021710 V-204502 The Red Hat Enterprise Linux operating system must not have the telnet-server package installed. Cat I
RHEL-07-030000 V-204503 The Red Hat Enterprise Linux operating system must be configured so that auditing is configured to produce records containing information to establish what type of events occurred, where the events occurred, the source of the events, and the outcome of the events. These audit records must also identify individual identities of group account users. Cat II
RHEL-07-030010 V-204504 The Red Hat Enterprise Linux operating system must shut down upon audit processing failure, unless availability is an overriding concern. If availability is a concern, the system must alert the designated staff (System Administrator [SA] and Information System Security Officer [ISSO] at a minimum) in the event of an audit processing failure. Cat II
RHEL-07-030201 V-204506 The Red Hat Enterprise Linux operating system must be configured to off-load audit logs onto a different system or storage media from the system being audited. Cat II
RHEL-07-030210 V-204507 The Red Hat Enterprise Linux operating system must take appropriate action when the remote logging buffer is full. Cat II
RHEL-07-030211 V-204508 The Red Hat Enterprise Linux operating system must label all off-loaded audit logs before sending them to the central log server. Cat II
RHEL-07-030300 V-204509 The Red Hat Enterprise Linux operating system must off-load audit records onto a different system or media from the system being audited. Cat II

Print

Display this benchmark in a printer-friendly format for off-line reference. This display does not include any commands.

Version Changes

If there are multiple versions of this benchmark, Xylok can display the differences between any changes in the checks.