DISA_Oracle_Linux_9_STIG_v1r2.audit from DISA Oracle Linux 9 STIG v1r2

OL09-00-000001 - The OL 9 operating system must implement cryptographic mechanisms to prevent unauthorized modification of all information at rest.

CAT|II

CCI|CCI-004910

Rule-ID|SV-271431r1092616_rule

STIG-ID|OL09-00-000001

Vuln-ID|V-271431

OL09-00-000002 - OL 9 must use a separate file system for the system audit data path.

CAT|III

CCI|CCI-001849

Rule-ID|SV-271432r1091008_rule

STIG-ID|OL09-00-000002

Vuln-ID|V-271432

OL09-00-000003 - OL 9 must be configured so that a separate file system must be used for user home directories (such as /home or an equivalent).

CCI|CCI-000366

Rule-ID|SV-271433r1091011_rule

STIG-ID|OL09-00-000003

Vuln-ID|V-271433

OL09-00-000004 - OL 9 must use a separate file system for /tmp.

Rule-ID|SV-271434r1091014_rule

STIG-ID|OL09-00-000004

Vuln-ID|V-271434

OL09-00-000005 - OL 9 must use a separate file system for /var.

Rule-ID|SV-271435r1091017_rule

STIG-ID|OL09-00-000005

Vuln-ID|V-271435

OL09-00-000006 - OL 9 must use a separate file system for /var/log.

Rule-ID|SV-271436r1091020_rule

STIG-ID|OL09-00-000006

Vuln-ID|V-271436

OL09-00-000007 - OL 9 must use a separate file system for /var/tmp.

Rule-ID|SV-271437r1091023_rule

STIG-ID|OL09-00-000007

Vuln-ID|V-271437

OL09-00-000010 - OL 9 must be a vendor supported release.

CAT|I

CCI|CCI-002605

Rule-ID|SV-271438r1091026_rule

STIG-ID|OL09-00-000010

Vuln-ID|V-271438

OL09-00-000015 - OL 9 vendor packaged system security patches and updates must be installed and up to date.

Rule-ID|SV-271439r1091029_rule

STIG-ID|OL09-00-000015

Vuln-ID|V-271439

OL09-00-000020 - OL 9 must be configured so that the graphical display manager is not the default target unless approved.

Rule-ID|SV-271440r1092462_rule

STIG-ID|OL09-00-000020

Vuln-ID|V-271440

OL09-00-000025 - OL 9 must require authentication to access emergency mode.

CCI|CCI-000213

Rule-ID|SV-271441r1091035_rule

STIG-ID|OL09-00-000025

Vuln-ID|V-271441

OL09-00-000030 - OL 9 must require authentication to access single-user mode.

Rule-ID|SV-271442r1091038_rule

STIG-ID|OL09-00-000030

Vuln-ID|V-271442

OL09-00-000040 - OL 9 must be configured to disable the Asynchronous Transfer Mode (ATM) kernel module.

CCI|CCI-000381

Rule-ID|SV-271443r1092463_rule

STIG-ID|OL09-00-000040

Vuln-ID|V-271443

OL09-00-000041 - OL 9 must be configured to disable the Controller Area Network (CAN) kernel module.

Rule-ID|SV-271444r1091044_rule

STIG-ID|OL09-00-000041

Vuln-ID|V-271444

OL09-00-000042 - OL 9 must be configured to disable the FireWire kernel module.

Rule-ID|SV-271445r1091047_rule

STIG-ID|OL09-00-000042

Vuln-ID|V-271445

OL09-00-000043 - OL 9 must disable the Stream Control Transmission Protocol (SCTP) kernel module.

Rule-ID|SV-271446r1091050_rule

STIG-ID|OL09-00-000043

Vuln-ID|V-271446

OL09-00-000044 - OL 9 must disable the Transparent Inter Process Communication (TIPC) kernel module.

Rule-ID|SV-271447r1092464_rule

STIG-ID|OL09-00-000044

Vuln-ID|V-271447

OL09-00-000045 - OL 9 must disable mounting of cramfs.

Rule-ID|SV-271448r1091056_rule

STIG-ID|OL09-00-000045

Vuln-ID|V-271448

OL09-00-000046 - OL 9 Bluetooth must be disabled.

CCI|CCI-001443

Rule-ID|SV-271449r1091059_rule

STIG-ID|OL09-00-000046

Vuln-ID|V-271449

OL09-00-000047 - OL 9 must be configured to disable USB mass storage.

CCI|CCI-000778

CCI|CCI-001958

Rule-ID|SV-271450r1092466_rule

STIG-ID|OL09-00-000047

Vuln-ID|V-271450

OL09-00-000050 - OL 9 must require a unique superuser's name upon booting into single-user and maintenance modes.

Rule-ID|SV-271451r1091065_rule

STIG-ID|OL09-00-000050

Vuln-ID|V-271451

OL09-00-000060 - OL 9 must use a Linux Security Module configured to enforce limits on system services.

CCI|CCI-001084

CCI|CCI-002696

Rule-ID|SV-271452r1091068_rule

STIG-ID|OL09-00-000060

Vuln-ID|V-271452

OL09-00-000065 - OL 9 must enable the SELinux targeted policy.

Rule-ID|SV-271453r1091071_rule

STIG-ID|OL09-00-000065

Vuln-ID|V-271453

OL09-00-000070 - OL 9 must enable FIPS mode.

CCI|CCI-000068

CCI|CCI-000877

CCI|CCI-002418

CCI|CCI-002450

Rule-ID|SV-271454r1092458_rule

STIG-ID|OL09-00-000070

Vuln-ID|V-271454

OL09-00-000090 - OL 9 must display the Standard Mandatory DOD Notice and Consent Banner before granting local or remote access to the system via a command line user logon.

CCI|CCI-000048

CCI|CCI-001384

CCI|CCI-001385

CCI|CCI-001386

CCI|CCI-001387

CCI|CCI-001388

Rule-ID|SV-271455r1091077_rule

STIG-ID|OL09-00-000090

Vuln-ID|V-271455

OL09-00-000100 - OL 9 must not have the nfs-utils package installed.

Rule-ID|SV-271456r1091080_rule

STIG-ID|OL09-00-000100

Vuln-ID|V-271456

OL09-00-000105 - OL 9 must not have the rsh-server package installed.

Rule-ID|SV-271457r1091083_rule

STIG-ID|OL09-00-000105

Vuln-ID|V-271457

OL09-00-000110 - OL 9 must not have the telnet-server package installed.

Rule-ID|SV-271458r1091086_rule

STIG-ID|OL09-00-000110

Vuln-ID|V-271458

OL09-00-000115 - OL 9 must not have the gssproxy package installed.

Rule-ID|SV-271459r1091089_rule

STIG-ID|OL09-00-000115

Vuln-ID|V-271459

OL09-00-000120 - OL 9 must not have the iprutils package installed.

Rule-ID|SV-271460r1091092_rule

STIG-ID|OL09-00-000120

Vuln-ID|V-271460

OL09-00-000125 - OL 9 must not have the tuned package installed.

Rule-ID|SV-271461r1091095_rule

STIG-ID|OL09-00-000125

Vuln-ID|V-271461

OL09-00-000130 - OL 9 must not have a File Transfer Protocol (FTP) server package installed.

CCI|CCI-000197

Rule-ID|SV-271462r1091098_rule

STIG-ID|OL09-00-000130

Vuln-ID|V-271462

OL09-00-000135 - OL 9 must not have a Trivial File Transfer Protocol (TFTP) server package installed.

Rule-ID|SV-271463r1091101_rule

STIG-ID|OL09-00-000135

Vuln-ID|V-271463

OL09-00-000140 - OL 9 must not have the quagga package installed.

Rule-ID|SV-271464r1092459_rule

STIG-ID|OL09-00-000140

Vuln-ID|V-271464

OL09-00-000145 - OL 9 must not have a graphical display manager installed unless approved.

CCI|CCI-000382

Rule-ID|SV-271465r1091107_rule

STIG-ID|OL09-00-000145

Vuln-ID|V-271465

OL09-00-000150 - OL 9 must not have the sendmail package installed.

Rule-ID|SV-271466r1091110_rule

STIG-ID|OL09-00-000150

Vuln-ID|V-271466

OL09-00-000200 - OL 9 must have policycoreutils package installed.

Rule-ID|SV-271467r1091113_rule

STIG-ID|OL09-00-000200

Vuln-ID|V-271467

OL09-00-000210 - OL 9 policycoreutils-python-utils package must be installed.

Rule-ID|SV-271468r1091116_rule

STIG-ID|OL09-00-000210

Vuln-ID|V-271468

OL09-00-000220 - OL 9 must have the firewalld package installed.

CCI|CCI-002314

CCI|CCI-002322

Rule-ID|SV-271469r1091119_rule

STIG-ID|OL09-00-000220

Vuln-ID|V-271469

OL09-00-000221 - OL 9 must be configured so that the firewalld service is active.

Rule-ID|SV-271470r1092618_rule

STIG-ID|OL09-00-000221

Vuln-ID|V-271470

OL09-00-000222 - OL 9 must be configured to prohibit or restrict the use of functions, ports, protocols, and/or services, as defined in the Ports, Protocols, and Services Management (PPSM) Category Assignments List (CAL) and vulnerability assessments.

Rule-ID|SV-271471r1091125_rule

STIG-ID|OL09-00-000222

Vuln-ID|V-271471

OL09-00-000223 - OL 9 must control remote access methods.

Rule-ID|SV-271472r1091128_rule

STIG-ID|OL09-00-000223

Vuln-ID|V-271472

OL09-00-000224 - OL 9 must be configured so that the firewall employs a deny-all, allow-by-exception policy for allowing connections to other systems.

Detections

Analytics

DISA Oracle Linux 9 STIG v1r2

Warning! Audit Deprecated

Audit Details

Audit Changelog

Revision 1.2

Miscellaneous

Revision 1.1

Functional Update

Miscellaneous


Revision 1.2 Dec 19, 2025 Miscellaneous Audit deprecated. Metadata updated. References updated.
Revision 1.1 Oct 31, 2025 Functional Update OL09-00-001115 - OL 9 must require a boot loader superuser password. Miscellaneous Metadata updated. Variables updated.