DISA_STIG_Oracle_Linux_7_v3r2.audit from DISA Oracle Linux 7 v3r2 STIG

OL07-00-010010 - The Oracle Linux operating system must be configured so that the file permissions, ownership, and group membership of system files and commands match the vendor values.

CAT|I

CCI|CCI-001494

CCI|CCI-001496

Rule-ID|SV-221652r991557_rule

STIG-ID|OL07-00-010010

STIG-Legacy|SV-108149

STIG-Legacy|V-99045

Vuln-ID|V-221652

OL07-00-010019 - The Oracle Linux operating system must ensure cryptographic verification of vendor software packages.

CAT|II

CCI|CCI-001749

CCI|CCI-003992

Rule-ID|SV-256975r1015198_rule

STIG-ID|OL07-00-010019

Vuln-ID|V-256975

OL07-00-010020 - The Oracle Linux operating system must be configured so that the cryptographic hash of system files and commands matches vendor values.

Rule-ID|SV-221653r1015161_rule

STIG-ID|OL07-00-010020

STIG-Legacy|SV-108151

STIG-Legacy|V-99047

Vuln-ID|V-221653

OL07-00-010030 - The Oracle Linux operating system must display the Standard Mandatory DoD Notice and Consent Banner before granting local or remote access to the system via a graphical user logon.

CCI|CCI-000048

CCI|CCI-000050

CCI|CCI-001384

CCI|CCI-001385

CCI|CCI-001386

CCI|CCI-001387

CCI|CCI-001388

Rule-ID|SV-221654r958390_rule

STIG-ID|OL07-00-010030

STIG-Legacy|SV-108153

STIG-Legacy|V-99049

Vuln-ID|V-221654

OL07-00-010040 - The Oracle Linux operating system must display the approved Standard Mandatory DoD Notice and Consent Banner before granting local or remote access to the system via a graphical user logon.

Rule-ID|SV-221655r958390_rule

STIG-ID|OL07-00-010040

STIG-Legacy|SV-108155

STIG-Legacy|V-99051

Vuln-ID|V-221655

OL07-00-010050 - The Oracle Linux operating system must display the Standard Mandatory DoD Notice and Consent Banner before granting local or remote access to the system via a command line user logon.

Rule-ID|SV-221656r958390_rule

STIG-ID|OL07-00-010050

STIG-Legacy|SV-108157

STIG-Legacy|V-99053

Vuln-ID|V-221656

OL07-00-010060 - The Oracle Linux operating system must enable a user session lock until that user re-establishes access using established identification and authentication procedures.

CCI|CCI-000056

CCI|CCI-000057

CCI|CCI-000058

Rule-ID|SV-221657r1015162_rule

STIG-ID|OL07-00-010060

STIG-Legacy|SV-108159

STIG-Legacy|V-99055

Vuln-ID|V-221657

OL07-00-010061 - The Oracle Linux operating system must uniquely identify and must authenticate users using multifactor authentication via a graphical user logon.

CCI|CCI-001948

CCI|CCI-004046

Rule-ID|SV-221658r1015163_rule

STIG-ID|OL07-00-010061

STIG-Legacy|SV-108161

STIG-Legacy|V-99057

Vuln-ID|V-221658

OL07-00-010062 - The Oracle Linux operating system must prevent a user from overriding the screensaver lock-enabled setting for the graphical user interface.

Rule-ID|SV-221659r958402_rule

STIG-ID|OL07-00-010062

STIG-Legacy|SV-108163

STIG-Legacy|V-99059

Vuln-ID|V-221659

OL07-00-010063 - The Oracle Linux operating system must disable the login screen user list for graphical user interfaces.

CCI|CCI-000366

Rule-ID|SV-256976r991589_rule

STIG-ID|OL07-00-010063

Vuln-ID|V-256976

OL07-00-010070 - The Oracle Linux operating system must initiate a screensaver after a 15-minute period of inactivity for graphical user interfaces.

Rule-ID|SV-221660r958402_rule

STIG-ID|OL07-00-010070

STIG-Legacy|SV-108165

STIG-Legacy|V-99061

Vuln-ID|V-221660

OL07-00-010081 - The Oracle Linux operating system must prevent a user from overriding the screensaver lock-delay setting for the graphical user interface.

Rule-ID|SV-221661r958402_rule

STIG-ID|OL07-00-010081

STIG-Legacy|SV-108167

STIG-Legacy|V-99063

Vuln-ID|V-221661

OL07-00-010082 - The Oracle Linux operating system must prevent a user from overriding the session idle-delay setting for the graphical user interface.

Rule-ID|SV-221662r958402_rule

STIG-ID|OL07-00-010082

STIG-Legacy|SV-108169

STIG-Legacy|V-99065

Vuln-ID|V-221662

OL07-00-010100 - The Oracle Linux operating system must initiate a session lock for the screensaver after a period of inactivity for graphical user interfaces.

Rule-ID|SV-221664r958402_rule

STIG-ID|OL07-00-010100

STIG-Legacy|SV-108173

STIG-Legacy|V-99069

Vuln-ID|V-221664

OL07-00-010101 - The Oracle Linux operating system must prevent a user from overriding the screensaver idle-activation-enabled setting for the graphical user interface.

Rule-ID|SV-221665r958402_rule

STIG-ID|OL07-00-010101

STIG-Legacy|SV-108175

STIG-Legacy|V-99071

Vuln-ID|V-221665

OL07-00-010110 - The Oracle Linux operating system must initiate a session lock for graphical user interfaces when the screensaver is activated.

Rule-ID|SV-221666r958402_rule

STIG-ID|OL07-00-010110

STIG-Legacy|SV-108177

STIG-Legacy|V-99073

Vuln-ID|V-221666

OL07-00-010118 - The Oracle Linux operating system must be configured so that /etc/pam.d/passwd implements /etc/pam.d/system-auth when changing passwords.

CCI|CCI-000192

CCI|CCI-004066

Rule-ID|SV-221667r1015164_rule

STIG-ID|OL07-00-010118

STIG-Legacy|SV-108179

STIG-Legacy|V-99075

Vuln-ID|V-221667

OL07-00-010119 - The Oracle Linux operating system must be configured so that when passwords are changed or new passwords are established, pwquality must be used.

Rule-ID|SV-221668r1015165_rule

STIG-ID|OL07-00-010119

STIG-Legacy|SV-108181

STIG-Legacy|V-99077

Vuln-ID|V-221668

OL07-00-010120 - The Oracle Linux operating system must be configured so that when passwords are changed or new passwords are established, the new password must contain at least one upper-case character.

Rule-ID|SV-221669r1015166_rule

STIG-ID|OL07-00-010120

STIG-Legacy|SV-108183

STIG-Legacy|V-99079

Vuln-ID|V-221669

OL07-00-010130 - The Oracle Linux operating system must be configured so that when passwords are changed or new passwords are established, the new password must contain at least one lower-case character.

CCI|CCI-000193

Rule-ID|SV-221670r1015167_rule

STIG-ID|OL07-00-010130

STIG-Legacy|SV-108185

STIG-Legacy|V-99081

Vuln-ID|V-221670

OL07-00-010140 - The Oracle Linux operating system must be configured so that when passwords are changed or new passwords are assigned, the new password must contain at least one numeric character.

CCI|CCI-000194

Rule-ID|SV-221671r1015168_rule

STIG-ID|OL07-00-010140

STIG-Legacy|SV-108187

STIG-Legacy|V-99083

Vuln-ID|V-221671

OL07-00-010150 - The Oracle Linux operating system must be configured so that when passwords are changed or new passwords are established, the new password must contain at least one special character.

CCI|CCI-001619

Rule-ID|SV-221672r1015169_rule

STIG-ID|OL07-00-010150

STIG-Legacy|SV-108189

STIG-Legacy|V-99085

Vuln-ID|V-221672

OL07-00-010160 - The Oracle Linux operating system must be configured so that when passwords are changed a minimum of eight of the total number of characters must be changed.

CCI|CCI-000195

Rule-ID|SV-221673r1015170_rule

STIG-ID|OL07-00-010160

STIG-Legacy|SV-108191

STIG-Legacy|V-99087

Vuln-ID|V-221673

OL07-00-010170 - The Oracle Linux operating system must be configured so that when passwords are changed a minimum of four character classes must be changed.

Rule-ID|SV-221674r1015171_rule

STIG-ID|OL07-00-010170

STIG-Legacy|SV-108193

STIG-Legacy|V-99089

Vuln-ID|V-221674

OL07-00-010180 - The Oracle Linux operating system must be configured so that when passwords are changed the number of repeating consecutive characters must not be more than three characters.

Rule-ID|SV-221675r1015172_rule

STIG-ID|OL07-00-010180

STIG-Legacy|SV-108195

STIG-Legacy|V-99091

Vuln-ID|V-221675

OL07-00-010190 - The Oracle Linux operating system must be configured so that when passwords are changed the number of repeating characters of the same character class must not be more than four characters.

Rule-ID|SV-221676r1015173_rule

STIG-ID|OL07-00-010190

STIG-Legacy|SV-108197

STIG-Legacy|V-99093

Vuln-ID|V-221676

OL07-00-010199 - The Oracle Linux operating system must be configured to prevent overwriting of custom authentication configuration settings by the authconfig utility.

CCI|CCI-000196

CCI|CCI-004062

Rule-ID|SV-255902r1015197_rule

STIG-ID|OL07-00-010199

Vuln-ID|V-255902

OL07-00-010200 - The Oracle Linux operating system must be configured so that the PAM system service is configured to store only encrypted representations of passwords.

Rule-ID|SV-221677r1015174_rule

STIG-ID|OL07-00-010200

STIG-Legacy|SV-108199

STIG-Legacy|V-99095

Vuln-ID|V-221677

OL07-00-010210 - The Oracle Linux operating system must be configured to use the shadow file to store only encrypted representations of passwords.

Rule-ID|SV-221678r1015175_rule

STIG-ID|OL07-00-010210

STIG-Legacy|SV-108201

STIG-Legacy|V-99097

Vuln-ID|V-221678

OL07-00-010220 - The Oracle Linux operating system must be configured so that user and group account administration utilities are configured to store only encrypted representations of passwords.

Rule-ID|SV-221680r1015176_rule

STIG-ID|OL07-00-010220

STIG-Legacy|SV-108203

STIG-Legacy|V-99099

Detections

Analytics

DISA Oracle Linux 7 STIG v3r2

Warning! Audit Deprecated

Audit Details

Audit Changelog

Revision 1.1

Miscellaneous