RHEL 8 STIG Version Comparison

There are 34 differences between versions v1 r13 (Jan. 24, 2024) (the "left" version) and v2 r1 (Oct. 24, 2024) (the "right" version).

Check RHEL-08-010001 was removed from the benchmark in the "right" version. The text below reflects the old wording.

This check's original form is available here.

Title

The RHEL 8 operating system must implement the Endpoint Security for Linux Threat Prevention tool.

Check Content

Check that the following package has been installed: $ sudo rpm -qa | grep -i mcafeetp If the "mcafeetp" package is not installed, this is a finding. Verify that the daemon is running: $ sudo ps -ef | grep -i mfetpd If the daemon is not running, this is a finding.

Discussion

Adding endpoint security tools can provide the capability to automatically take actions in response to malicious behavior, which can provide additional agility in reacting to network threats. These tools also often include a reporting capability to provide network awareness of the system, which may not otherwise exist in an organization's systems management regime.

Fix

Install and enable the latest Trellix ENSLTP package.