ALMA-09-001010 - AlmaLinux OS 9 must limit the number of concurrent sessions to ten for all accounts and/or account types.

800-53|AC-10

CAT|III

CCI|CCI-000054

Rule-ID|SV-269102r1049984_rule

STIG-ID|ALMA-09-001010

Vuln-ID|V-269102

ALMA-09-001120 - AlmaLinux OS 9 must automatically lock graphical user sessions after 15 minutes of inactivity.

800-53|AC-11(1)

CAT|II

CCI|CCI-000060

Rule-ID|SV-269103r1101811_rule

STIG-ID|ALMA-09-001120

Vuln-ID|V-269103

ALMA-09-001230 - AlmaLinux OS 9 must conceal, via the session lock, information previously visible on the display with a publicly viewable image.

Rule-ID|SV-269104r1049986_rule

STIG-ID|ALMA-09-001230

Vuln-ID|V-269104

ALMA-09-001340 - AlmaLinux OS 9 must prevent a user from overriding the session idle-delay setting for the graphical user interface.

Rule-ID|SV-269105r1101820_rule

STIG-ID|ALMA-09-001340

Vuln-ID|V-269105

ALMA-09-001450 - AlmaLinux OS 9 must initiate a session lock for graphical user interfaces when the screensaver is activated.

800-53|AC-11a.

CCI|CCI-000057

Rule-ID|SV-269106r1049988_rule

STIG-ID|ALMA-09-001450

Vuln-ID|V-269106

ALMA-09-001560 - AlmaLinux OS 9 must prevent a user from overriding the session lock-delay setting for the graphical user interface.

Rule-ID|SV-269107r1049989_rule

STIG-ID|ALMA-09-001560

Vuln-ID|V-269107

ALMA-09-001890 - AlmaLinux OS 9 must automatically exit interactive command shell user sessions after 10 minutes of inactivity.

800-53|AC-12(1)

800-53|SC-10

CCI|CCI-001133

CCI|CCI-002364

Rule-ID|SV-269108r1049990_rule

STIG-ID|ALMA-09-001890

Vuln-ID|V-269108

ALMA-09-002000 - AlmaLinux OS 9 must be able to directly initiate a session lock for all connection types using smart card when the smart card is removed.

800-53|AC-11b.

CCI|CCI-000056

Rule-ID|SV-269109r1049991_rule

STIG-ID|ALMA-09-002000

Vuln-ID|V-269109

ALMA-09-002110 - AlmaLinux OS 9 must prevent a user from overriding the disabling of the graphical user smart card removal action.

Rule-ID|SV-269110r1049992_rule

STIG-ID|ALMA-09-002110

Vuln-ID|V-269110

ALMA-09-002770 - AlmaLinux OS 9 must log SSH connection attempts and failures to the server.

800-53|AC-17(1)

CCI|CCI-000067

Rule-ID|SV-269111r1050605_rule

STIG-ID|ALMA-09-002770

Vuln-ID|V-269111

ALMA-09-002880 - All AlmaLinux OS 9 remote access methods must be monitored.

Rule-ID|SV-269112r1050606_rule

STIG-ID|ALMA-09-002880

Vuln-ID|V-269112

ALMA-09-002990 - AlmaLinux OS 9 SSH client must be configured to use only encryption ciphers employing FIPS 140-3-validated cryptographic hash algorithms to protect the confidentiality of SSH client connections.

800-53|AC-17(2)

CAT|I

CCI|CCI-001453

Rule-ID|SV-269113r1184081_rule

STIG-ID|ALMA-09-002990

Vuln-ID|V-269113

ALMA-09-003100 - AlmaLinux OS 9 must implement DOD-approved encryption ciphers to protect the confidentiality of SSH connections.

Rule-ID|SV-283675r1193286_rule

STIG-ID|ALMA-09-003100

Vuln-ID|V-283675

ALMA-09-003210 - AlmaLinux OS 9 SSH client must be configured to use only Message Authentication Codes (MACs) employing FIPS 140-3-validated cryptographic hash algorithms.

Rule-ID|SV-269115r1184083_rule

STIG-ID|ALMA-09-003210

Vuln-ID|V-269115

ALMA-09-003320 - The AlmaLinux 9 SSH server must be configured to use only DOD-approved encryption ciphers employing FIPS 140-3-validated cryptographic hash algorithms to protect the confidentiality of SSH server connections.

Rule-ID|SV-269116r1184084_rule

STIG-ID|ALMA-09-003320

Vuln-ID|V-269116

ALMA-09-003430 - AlmaLinux OS 9 must implement DOD-approved systemwide cryptographic policies to protect the confidentiality of SSH server connections.

Rule-ID|SV-269118r1050609_rule

STIG-ID|ALMA-09-003430

Vuln-ID|V-269118

ALMA-09-003540 - The AlmaLinux OS 9 SSH server must be configured to use only Message Authentication Codes (MACs) employing FIPS 140-3-validated cryptographic hash algorithms to protect the confidentiality of SSH server connections.

Rule-ID|SV-269119r1184085_rule

STIG-ID|ALMA-09-003540

Vuln-ID|V-269119

ALMA-09-003650 - AlmaLinux OS 9 must force a frequent session key renegotiation for SSH connections to the server.

CCI|CCI-000068

Rule-ID|SV-269120r1050610_rule

STIG-ID|ALMA-09-003650

Vuln-ID|V-269120

ALMA-09-003870 - AlmaLinux OS 9 IP tunnels must use FIPS 140-3 approved cryptographic algorithms.

Rule-ID|SV-269122r1184087_rule

STIG-ID|ALMA-09-003870

Vuln-ID|V-269122

ALMA-09-003980 - AlmaLinux OS 9 must implement DOD-approved encryption in the OpenSSL package.

Rule-ID|SV-283676r1193289_rule

STIG-ID|ALMA-09-003980

Vuln-ID|V-283676

ALMA-09-004310 - AlmaLinux OS 9 must use the TuxCare ESU repository.

800-53|MA-4c.

800-53|SC-13

CCI|CCI-000877

CCI|CCI-002450

Rule-ID|SV-269125r1107616_rule

STIG-ID|ALMA-09-004310

Vuln-ID|V-269125

ALMA-09-004320 - AlmaLinux OS 9 must use the TuxCare FIPS packages and not the default encryption packages.

Rule-ID|SV-269126r1107617_rule

STIG-ID|ALMA-09-004320

Vuln-ID|V-269126

ALMA-09-004420 - AlmaLinux OS 9 must enable FIPS mode.

Rule-ID|SV-269127r1155256_rule

STIG-ID|ALMA-09-004420

Vuln-ID|V-269127

ALMA-09-004750 - AlmaLinux OS 9 must automatically expire temporary accounts within 72 hours.

800-53|AC-2(2)

CCI|CCI-000016

CCI|CCI-001682

Rule-ID|SV-269128r1050010_rule

STIG-ID|ALMA-09-004750

Vuln-ID|V-269128

ALMA-09-004970 - AlmaLinux OS 9 must generate audit records for all account creations, modifications, disabling, and termination events that affect /etc/sudoers.

800-53|AC-2(1)

800-53|AC-2(4)

800-53|AU-3

800-53|AU-3(1)

800-53|AU-12a.

800-53|AU-12c.

800-53|MA-4(1)(a)

CCI|CCI-000015

CCI|CCI-000018

CCI|CCI-000130

CCI|CCI-000135

CCI|CCI-000169

CCI|CCI-000172

CCI|CCI-001403

CCI|CCI-001404

CCI|CCI-001405

CCI|CCI-002130

CCI|CCI-002884

CCI|CCI-004188

Rule-ID|SV-269129r1050011_rule

STIG-ID|ALMA-09-004970

Vuln-ID|V-269129

ALMA-09-005080 - AlmaLinux OS 9 must generate audit records for all account creations, modifications, disabling, and termination events that affect /etc/group.

Rule-ID|SV-269130r1050012_rule

STIG-ID|ALMA-09-005080

Vuln-ID|V-269130

ALMA-09-005190 - AlmaLinux OS 9 must generate audit records for all account creations, modifications, disabling, and termination events that affect /etc/gshadow.

Rule-ID|SV-269131r1050013_rule

STIG-ID|ALMA-09-005190

Vuln-ID|V-269131

ALMA-09-005300 - AlmaLinux OS 9 must generate audit records for all account creations, modifications, disabling, and termination events that affect /etc/security/opasswd.

Rule-ID|SV-269132r1050014_rule

STIG-ID|ALMA-09-005300

Vuln-ID|V-269132

ALMA-09-005410 - AlmaLinux OS 9 must generate audit records for all account creations, modifications, disabling, and termination events that affect /etc/passwd.

Rule-ID|SV-269133r1050015_rule

STIG-ID|ALMA-09-005410

Vuln-ID|V-269133

ALMA-09-005960 - AlmaLinux OS 9 must generate audit records for all account creations, modifications, disabling, and termination events that affect /etc/shadow.

Rule-ID|SV-269134r1050016_rule

STIG-ID|ALMA-09-005960

Vuln-ID|V-269134

ALMA-09-006070 - AlmaLinux OS 9 must generate audit records for all account creations, modifications, disabling, and termination events that affect the files within /etc/sudoers.d/

Rule-ID|SV-269135r1050017_rule

STIG-ID|ALMA-09-006070

Vuln-ID|V-269135

ALMA-09-006180 - AlmaLinux OS 9 must require authentication to access emergency mode.

800-53|AC-3

CCI|CCI-000213

Rule-ID|SV-269136r1137691_rule

STIG-ID|ALMA-09-006180

Vuln-ID|V-269136

ALMA-09-006290 - AlmaLinux OS 9 must require a boot loader password.

Rule-ID|SV-269137r1137691_rule

STIG-ID|ALMA-09-006290

Vuln-ID|V-269137

ALMA-09-006400 - AlmaLinux OS 9 must require a unique superuser's name upon booting into single-user and maintenance modes.

Rule-ID|SV-269138r1137691_rule

STIG-ID|ALMA-09-006400

Vuln-ID|V-269138

ALMA-09-006510 - AlmaLinux OS 9 must require authentication to access single-user mode.

Rule-ID|SV-269139r1137691_rule

STIG-ID|ALMA-09-006510

Vuln-ID|V-269139

ALMA-09-006620 - The systemd Ctrl-Alt-Delete burst key sequence in AlmaLinux OS 9 must be disabled.

800-53|AC-6(10)

CCI|CCI-002235

Rule-ID|SV-269140r1050022_rule

STIG-ID|ALMA-09-006620

Vuln-ID|V-269140

ALMA-09-006730 - The Ctrl-Alt-Delete key sequence must be disabled on AlmaLinux OS 9.

Rule-ID|SV-269141r1101851_rule

STIG-ID|ALMA-09-006730

Vuln-ID|V-269141

ALMA-09-006840 - AlmaLinux OS 9 must have the sudo package installed.

Rule-ID|SV-269142r1050024_rule

STIG-ID|ALMA-09-006840

Detections

Analytics

DISA Cloud Linux AlmaLinux OS 9 STIG v1r6

Audit Details

File Details

Audit Changelog

Revision 1.2

Functional Update

Miscellaneous

Revision 1.1

Miscellaneous


Revision 1.2 Jul 14, 2026 Functional Update ALMA-09-022130 - All AlmaLinux OS 9 local initialization files must have mode 0740 or less permissive. Miscellaneous Metadata updated.
Revision 1.1 Jun 2, 2026 Miscellaneous Metadata updated.

Detections

Analytics

DISA Cloud Linux AlmaLinux OS 9 STIG v1r6 Download File

Audit Details

File Details

Audit Changelog

Revision 1.2

Functional Update

Miscellaneous

Revision 1.1

Miscellaneous

DISA Cloud Linux AlmaLinux OS 9 STIG v1r6