Revision 1.1Oct 24, 2025

Functional Update
  • OL08-00-010600 - OL 8 file systems must not interpret character or block special devices from untrusted file systems.
  • OL08-00-010610 - OL 8 file systems must not execute binary files on removable media.
  • OL08-00-010620 - OL 8 must prevent files with the setuid and setgid bit set from being executed on file systems that are used with removable media.
  • OL08-00-010670 - OL 8 must disable kernel dumps unless needed.
  • OL08-00-010680 - For OL 8 systems using Domain Name Servers (DNS) resolution, at least two name servers must be configured.
  • OL08-00-020012 - OL 8 systems below version 8.2 must automatically lock an account when three unsuccessful logon attempts occur during a 15-minute time period.
  • OL08-00-020013 - OL 8 systems, versions 8.2 and above, must automatically lock an account when three unsuccessful logon attempts occur during a 15-minute time period.
Miscellaneous
  • Metadata updated.
  • Variables updated.