RHEL 8 STIG Version Comparison
Red Hat Enterprise Linux 8 Security Technical Implementation Guide
Comparison
There are 18 differences between versions v1 r11 (July 26, 2023) (the "left" version) and v1 r13 (Jan. 24, 2024) (the "right" version).
Check RHEL-08-010001 was changed between these two versions. Green, underlined text was added, red, struck-out text was removed.
The regular view of the left check and right check may be easier to read.
Text Differences
Title
The RHEL 8 operating system must implement the Endpoint Security for Linux Threat Prevention tool.
Check Content
Check Per OPORD 16-0080, the preferred endpoint security tool is McAfee Endpoint Security for Linux (ENSL) in conjunction with SELinux. Procedure: Check that the following package has been installed: $ installed: $ sudo rpm -qa | grep -i mcafeetp If the "mcafeetp" package is not installed, this is a finding. Verify that the daemon is running: $ running: $ sudo ps -ef | grep -i mfetpd If the daemon is not running, this is a finding.
Discussion
Adding endpoint security tools can provide the capability to automatically take actions in response to malicious behavior, which can provide additional agility in reacting to network threats. These tools also often include a reporting capability to provide network awareness of the system, which may not otherwise exist in an organization's systems management regime.
Fix
Install and enable the latest McAfee Trellix ENSLTP package.