RHEL 8 STIG

Red Hat Enterprise Linux 8 Security Technical Implementation Guide

ID	Vuln ID	Title	Cat
RHEL-08-040127	V-230515	RHEL 8 must mount /var/log with the nosuid option.	Cat II
RHEL-08-040128	V-230516	RHEL 8 must mount /var/log with the noexec option.	Cat II
RHEL-08-040129	V-230517	RHEL 8 must mount /var/log/audit with the nodev option.	Cat II
RHEL-08-040130	V-230518	RHEL 8 must mount /var/log/audit with the nosuid option.	Cat II
RHEL-08-040131	V-230519	RHEL 8 must mount /var/log/audit with the noexec option.	Cat II
RHEL-08-040132	V-230520	RHEL 8 must mount /var/tmp with the nodev option.	Cat II
RHEL-08-040133	V-230521	RHEL 8 must mount /var/tmp with the nosuid option.	Cat II
RHEL-08-040134	V-230522	RHEL 8 must mount /var/tmp with the noexec option.	Cat II
RHEL-08-040135	V-230523	The RHEL 8 fapolicy module must be installed.	Cat II
RHEL-08-040136	V-244545	The RHEL 8 fapolicy module must be enabled.	Cat II
RHEL-08-040137	V-244546	The RHEL 8 fapolicy module must be configured to employ a deny-all, permit-by-exception policy to allow the execution of authorized software programs.	Cat II
RHEL-08-040139	V-244547	RHEL 8 must have the USBGuard installed.	Cat II
RHEL-08-040140	V-230524	RHEL 8 must block unauthorized peripherals before establishing a connection.	Cat II
RHEL-08-040141	V-244548	RHEL 8 must enable the USBGuard.	Cat II
RHEL-08-040150	V-230525	A firewall must be able to protect against or limit the effects of Denial of Service (DoS) attacks by ensuring RHEL 8 can implement rate-limiting measures on impacted network interfaces.	Cat II

Print

Display this benchmark in a printer-friendly format for off-line reference. This display does not include any commands.

If there are multiple versions of this benchmark, Xylok can display the differences between any changes in the checks.