DISA_STIG_Oracle_Linux_9_v1r3.audit from DISA Oracle Linux 9 STIG v1r3

OL09-00-000001 - The OL 9 operating system must implement cryptographic mechanisms to prevent unauthorized modification of all information at rest.

CAT|II

CCI|CCI-004910

Rule-ID|SV-271431r1092616_rule

STIG-ID|OL09-00-000001

Vuln-ID|V-271431

OL09-00-000002 - OL 9 must use a separate file system for the system audit data path.

CAT|III

CCI|CCI-001849

Rule-ID|SV-271432r1091008_rule

STIG-ID|OL09-00-000002

Vuln-ID|V-271432

OL09-00-000003 - OL 9 must be configured so that a separate file system must be used for user home directories (such as /home or an equivalent).

CCI|CCI-000366

Rule-ID|SV-271433r1091011_rule

STIG-ID|OL09-00-000003

Vuln-ID|V-271433

OL09-00-000004 - OL 9 must use a separate file system for /tmp.

Rule-ID|SV-271434r1091014_rule

STIG-ID|OL09-00-000004

Vuln-ID|V-271434

OL09-00-000005 - OL 9 must use a separate file system for /var.

Rule-ID|SV-271435r1091017_rule

STIG-ID|OL09-00-000005

Vuln-ID|V-271435

OL09-00-000006 - OL 9 must use a separate file system for /var/log.

Rule-ID|SV-271436r1091020_rule

STIG-ID|OL09-00-000006

Vuln-ID|V-271436

OL09-00-000007 - OL 9 must use a separate file system for /var/tmp.

Rule-ID|SV-271437r1091023_rule

STIG-ID|OL09-00-000007

Vuln-ID|V-271437

OL09-00-000010 - OL 9 must be a vendor supported release.

CAT|I

CCI|CCI-002605

Rule-ID|SV-271438r1117152_rule

STIG-ID|OL09-00-000010

Vuln-ID|V-271438

OL09-00-000015 - OL 9 vendor packaged system security patches and updates must be installed and up to date.

Rule-ID|SV-271439r1091029_rule

STIG-ID|OL09-00-000015

Vuln-ID|V-271439

OL09-00-000020 - OL 9 must be configured so that the graphical display manager is not the default target unless approved.

Rule-ID|SV-271440r1092462_rule

STIG-ID|OL09-00-000020

Vuln-ID|V-271440

OL09-00-000025 - OL 9 must require authentication to access emergency mode.

CCI|CCI-000213

Rule-ID|SV-271441r1117265_rule

STIG-ID|OL09-00-000025

Vuln-ID|V-271441

OL09-00-000030 - OL 9 must require authentication to access single-user mode.

Rule-ID|SV-271442r1117265_rule

STIG-ID|OL09-00-000030

Vuln-ID|V-271442

OL09-00-000040 - OL 9 must be configured to disable the Asynchronous Transfer Mode (ATM) kernel module.

CCI|CCI-000381

Rule-ID|SV-271443r1092463_rule

STIG-ID|OL09-00-000040

Vuln-ID|V-271443

OL09-00-000041 - OL 9 must be configured to disable the Controller Area Network (CAN) kernel module.

Rule-ID|SV-271444r1091044_rule

STIG-ID|OL09-00-000041

Vuln-ID|V-271444

OL09-00-000042 - OL 9 must be configured to disable the FireWire kernel module.

Rule-ID|SV-271445r1091047_rule

STIG-ID|OL09-00-000042

Vuln-ID|V-271445

OL09-00-000043 - OL 9 must disable the Stream Control Transmission Protocol (SCTP) kernel module.

Rule-ID|SV-271446r1091050_rule

STIG-ID|OL09-00-000043

Vuln-ID|V-271446

OL09-00-000044 - OL 9 must disable the Transparent Inter Process Communication (TIPC) kernel module.

Rule-ID|SV-271447r1092464_rule

STIG-ID|OL09-00-000044

Vuln-ID|V-271447

OL09-00-000045 - OL 9 must disable mounting of cramfs.

Rule-ID|SV-271448r1091056_rule

STIG-ID|OL09-00-000045

Vuln-ID|V-271448

OL09-00-000046 - OL 9 Bluetooth must be disabled.

CCI|CCI-001443

Rule-ID|SV-271449r1091059_rule

STIG-ID|OL09-00-000046

Vuln-ID|V-271449

OL09-00-000047 - OL 9 must be configured to disable USB mass storage.

CCI|CCI-000778

CCI|CCI-001958

Rule-ID|SV-271450r1092466_rule

STIG-ID|OL09-00-000047

Vuln-ID|V-271450

OL09-00-000050 - OL 9 must require a unique superuser's name upon booting into single-user and maintenance modes.

Rule-ID|SV-271451r1117265_rule

STIG-ID|OL09-00-000050

Vuln-ID|V-271451

OL09-00-000060 - OL 9 must use a Linux Security Module configured to enforce limits on system services.

CCI|CCI-001084

CCI|CCI-002696

Rule-ID|SV-271452r1091068_rule

STIG-ID|OL09-00-000060

Vuln-ID|V-271452

OL09-00-000065 - OL 9 must enable the SELinux targeted policy.

Rule-ID|SV-271453r1091071_rule

STIG-ID|OL09-00-000065

Vuln-ID|V-271453

OL09-00-000070 - OL 9 must enable FIPS mode.

CCI|CCI-000068

CCI|CCI-000877

CCI|CCI-002418

CCI|CCI-002450

Rule-ID|SV-271454r1092458_rule

STIG-ID|OL09-00-000070

Vuln-ID|V-271454

OL09-00-000090 - OL 9 must display the Standard Mandatory DOD Notice and Consent Banner before granting local or remote access to the system via a command line user logon.

CCI|CCI-000048

CCI|CCI-001384

CCI|CCI-001385

CCI|CCI-001386

CCI|CCI-001387

CCI|CCI-001388

Rule-ID|SV-271455r1091077_rule

STIG-ID|OL09-00-000090

Vuln-ID|V-271455

OL09-00-000100 - OL 9 must not have the nfs-utils package installed.

Rule-ID|SV-271456r1091080_rule

STIG-ID|OL09-00-000100

Vuln-ID|V-271456

OL09-00-000105 - OL 9 must not install packages from the Extra Packages for Enterprise Linux (EPEL) repository.

Rule-ID|SV-271457r1134853_rule

STIG-ID|OL09-00-000105

Vuln-ID|V-271457

OL09-00-000110 - OL 9 must not have the telnet-server package installed.

Rule-ID|SV-271458r1091086_rule

STIG-ID|OL09-00-000110

Vuln-ID|V-271458

OL09-00-000115 - OL 9 must not have the gssproxy package installed.

Rule-ID|SV-271459r1091089_rule

STIG-ID|OL09-00-000115

Vuln-ID|V-271459

OL09-00-000120 - OL 9 must not have the iprutils package installed.

Rule-ID|SV-271460r1091092_rule

STIG-ID|OL09-00-000120

Vuln-ID|V-271460

OL09-00-000125 - OL 9 must not have the tuned package installed.

Rule-ID|SV-271461r1091095_rule

STIG-ID|OL09-00-000125

Vuln-ID|V-271461

OL09-00-000130 - OL 9 must not have a File Transfer Protocol (FTP) server package installed.

CCI|CCI-000197

Rule-ID|SV-271462r1091098_rule

STIG-ID|OL09-00-000130

Vuln-ID|V-271462

OL09-00-000135 - OL 9 must not have a Trivial File Transfer Protocol (TFTP) server package installed.

Rule-ID|SV-271463r1091101_rule

STIG-ID|OL09-00-000135

Vuln-ID|V-271463

OL09-00-000140 - OL 9 must not have the quagga package installed.

Rule-ID|SV-271464r1092459_rule

STIG-ID|OL09-00-000140

Vuln-ID|V-271464

OL09-00-000145 - OL 9 must not have a graphical display manager installed unless approved.

CCI|CCI-000382

Rule-ID|SV-271465r1091107_rule

STIG-ID|OL09-00-000145

Vuln-ID|V-271465

OL09-00-000150 - OL 9 must not have the sendmail package installed.

Rule-ID|SV-271466r1091110_rule

STIG-ID|OL09-00-000150

Vuln-ID|V-271466

OL09-00-000200 - OL 9 must have policycoreutils package installed.

Rule-ID|SV-271467r1091113_rule

STIG-ID|OL09-00-000200

Vuln-ID|V-271467

OL09-00-000210 - OL 9 policycoreutils-python-utils package must be installed.

Rule-ID|SV-271468r1091116_rule

STIG-ID|OL09-00-000210

Vuln-ID|V-271468

OL09-00-000220 - OL 9 must have the firewalld package installed.

CCI|CCI-002314

CCI|CCI-002322

Rule-ID|SV-271469r1091119_rule

STIG-ID|OL09-00-000220

Vuln-ID|V-271469

OL09-00-000221 - OL 9 must be configured so that the firewalld service is active.

Rule-ID|SV-271470r1092618_rule

STIG-ID|OL09-00-000221

Vuln-ID|V-271470

OL09-00-000222 - OL 9 must be configured to prohibit or restrict the use of functions, ports, protocols, and/or services, as defined in the Ports, Protocols, and Services Management (PPSM) Category Assignments List (CAL) and vulnerability assessments.

Rule-ID|SV-271471r1091125_rule

STIG-ID|OL09-00-000222

Vuln-ID|V-271471

OL09-00-000223 - OL 9 must control remote access methods.

Rule-ID|SV-271472r1091128_rule

STIG-ID|OL09-00-000223

Vuln-ID|V-271472

OL09-00-000224 - OL 9 must be configured so that the firewall employs a deny-all, allow-by-exception policy for allowing connections to other systems.

Detections

Analytics

DISA Oracle Linux 9 STIG v1r3

Warning! Audit Deprecated

Audit Details

Audit Changelog

Revision 1.1

Miscellaneous