DISA_STIG_Red_Hat_Enterprise_Linux_10_v1r1.audit from DISA Red Hat Enterprise Linux 10 STIG v1r1

RHEL-10-000500 - RHEL 10 must enable FIPS mode.

800-53|AC-17(2)

800-53|MA-4(6)

800-53|MA-4c.

800-53|SC-8

800-53|SC-13

CAT|I

CCI|CCI-000068

CCI|CCI-000877

CCI|CCI-001453

CCI|CCI-002418

CCI|CCI-002450

CCI|CCI-002890

CCI|CCI-003123

Rule-ID|SV-281009r1184724_rule

STIG-ID|RHEL-10-000500

Vuln-ID|V-281009

RHEL-10-000510 - RHEL 10 must implement cryptographic mechanisms to prevent unauthorized disclosure or modification of all information on local disk partitions that requires at-rest protection.

800-53|SC-28

800-53|SC-28(1)

CCI|CCI-001199

CCI|CCI-002475

CCI|CCI-002476

Rule-ID|SV-280935r1184775_rule

STIG-ID|RHEL-10-000510

Vuln-ID|V-280935

RHEL-10-000520 - RHEL 10 must use a separate file system for the system audit data path.

800-53|AU-4

CAT|III

CCI|CCI-001849

Rule-ID|SV-280936r1184726_rule

STIG-ID|RHEL-10-000520

Vuln-ID|V-280936

RHEL-10-000530 - RHEL 10 must use a separate file system for user home directories (such as "/home" or an equivalent).

800-53|SC-5

CAT|II

CCI|CCI-002385

Rule-ID|SV-280937r1184727_rule

STIG-ID|RHEL-10-000530

Vuln-ID|V-280937

RHEL-10-000540 - RHEL 10 must use a separate file system for "/tmp".

Rule-ID|SV-280938r1184728_rule

STIG-ID|RHEL-10-000540

Vuln-ID|V-280938

RHEL-10-000550 - RHEL 10 must use a separate file system for "/var".

Rule-ID|SV-280939r1184729_rule

STIG-ID|RHEL-10-000550

Vuln-ID|V-280939

RHEL-10-000560 - RHEL 10 must use a separate file system for "/var/log".

Rule-ID|SV-280940r1184730_rule

STIG-ID|RHEL-10-000560

Vuln-ID|V-280940

RHEL-10-000570 - RHEL 10 must use a separate file system for "/var/tmp".

Rule-ID|SV-280941r1184731_rule

STIG-ID|RHEL-10-000570

Vuln-ID|V-280941

RHEL-10-001000 - RHEL 10 must be a vendor-supported release.

800-53|SA-22a.

CCI|CCI-003376

Rule-ID|SV-282965r1197252_rule

STIG-ID|RHEL-10-001000

Vuln-ID|V-282965

RHEL-10-001020 - RHEL 10 must ensure cryptographic verification of vendor software packages.

800-53|CM-5(3)

CCI|CCI-003992

Rule-ID|SV-280931r1197213_rule

STIG-ID|RHEL-10-001020

Vuln-ID|V-280931

RHEL-10-001030 - RHEL 10 must check the GNU Privacy Guard (GPG) signature of software packages originating from external software repositories before installation.

Rule-ID|SV-280932r1197215_rule

STIG-ID|RHEL-10-001030

Vuln-ID|V-280932

RHEL-10-001040 - RHEL 10 must check the GNU Privacy Guard (GPG) signature of locally installed software packages before installation.

Rule-ID|SV-280933r1197217_rule

STIG-ID|RHEL-10-001040

Vuln-ID|V-280933

RHEL-10-001050 - RHEL 10 must have GNU Privacy Guard (GPG) signature verification enabled for all software repositories.

Rule-ID|SV-280934r1165157_rule

STIG-ID|RHEL-10-001050

Vuln-ID|V-280934

RHEL-10-200000 - RHEL 10 must remove all software components after updated versions have been installed.

800-53|SI-2(6)

CCI|CCI-002617

Rule-ID|SV-280942r1165181_rule

STIG-ID|RHEL-10-200000

Vuln-ID|V-280942

RHEL-10-200010 - RHEL 10 must not have the "nfs-utils" package installed.

800-53|CM-7a.

CCI|CCI-000381

Rule-ID|SV-280943r1165184_rule

STIG-ID|RHEL-10-200010

Vuln-ID|V-280943

RHEL-10-200020 - RHEL 10 must not have the "telnet-server" package installed.

Rule-ID|SV-280944r1184749_rule

STIG-ID|RHEL-10-200020

Vuln-ID|V-280944

RHEL-10-200030 - RHEL 10 must not have the "gssproxy" package installed.

Rule-ID|SV-280945r1184750_rule

STIG-ID|RHEL-10-200030

Vuln-ID|V-280945

RHEL-10-200040 - RHEL 10 must not have the tuned package installed.

Rule-ID|SV-280946r1184751_rule

STIG-ID|RHEL-10-200040

Vuln-ID|V-280946

RHEL-10-200050 - RHEL 10 must not have a Trivial File Transfer Protocol (TFTP) server package installed unless it is required by the mission, and if required, the TFTP daemon must be configured to operate in secure mode.

Rule-ID|SV-280947r1165196_rule

STIG-ID|RHEL-10-200050

Vuln-ID|V-280947

RHEL-10-200060 - RHEL 10 must not have the unbound package installed.

Rule-ID|SV-280948r1197218_rule

STIG-ID|RHEL-10-200060

Vuln-ID|V-280948

RHEL-10-200070 - RHEL 10 must not have the "tftp" package installed.

800-53|IA-5(1)(c)

CCI|CCI-000197

Rule-ID|SV-280949r1195338_rule

STIG-ID|RHEL-10-200070

Vuln-ID|V-280949

RHEL-10-200080 - RHEL 10 must not have the "gdm" package installed.

Rule-ID|SV-280950r1165205_rule

STIG-ID|RHEL-10-200080

Vuln-ID|V-280950

RHEL-10-200090 - RHEL 10 must not have a File Transfer Protocol (FTP) server package installed.

Rule-ID|SV-280951r1184744_rule

STIG-ID|RHEL-10-200090

Vuln-ID|V-280951

RHEL-10-200500 - RHEL 10 must have the "subscription-manager" package installed.

Rule-ID|SV-280952r1195340_rule

STIG-ID|RHEL-10-200500

Vuln-ID|V-280952

RHEL-10-200510 - RHEL 10 must have the "nss-tools" package installed.

Rule-ID|SV-280953r1195342_rule

STIG-ID|RHEL-10-200510

Vuln-ID|V-280953

RHEL-10-200520 - RHEL 10 must have the "s-nail" package installed.

800-53|CM-3(5)

CCI|CCI-001744

Rule-ID|SV-280954r1195344_rule

STIG-ID|RHEL-10-200520

Vuln-ID|V-280954

RHEL-10-200530 - RHEL 10 must have the "firewalld" package installed.

800-53|AC-17(1)

800-53|AC-17(9)

800-53|CM-7b.

CCI|CCI-000382

CCI|CCI-002314

CCI|CCI-002322

Rule-ID|SV-280955r1197220_rule

STIG-ID|RHEL-10-200530

Vuln-ID|V-280955

RHEL-10-200531 - RHEL 10 must have the "firewalld" service set to active.

Rule-ID|SV-280956r1165223_rule

STIG-ID|RHEL-10-200531

Vuln-ID|V-280956

RHEL-10-200532 - RHEL 10 must employ a deny-all, allow-by-exception policy for allowing connections to other systems.

Rule-ID|SV-280957r1165226_rule

STIG-ID|RHEL-10-200532

Vuln-ID|V-280957

RHEL-10-200540 - RHEL 10 must have the "chrony" package installed.

800-53|AU-8(1)

CCI|CCI-004923

Rule-ID|SV-280958r1195348_rule

STIG-ID|RHEL-10-200540

Vuln-ID|V-280958

RHEL-10-200541 - RHEL 10 must enable the chronyd service.

Rule-ID|SV-280959r1165232_rule

STIG-ID|RHEL-10-200541

Vuln-ID|V-280959

RHEL-10-200542 - RHEL 10 must disable the chrony daemon from acting as a server.

Rule-ID|SV-280960r1165235_rule

STIG-ID|RHEL-10-200542

Vuln-ID|V-280960

RHEL-10-200543 - RHEL 10 must disable network management of the chrony daemon.

Rule-ID|SV-280961r1165238_rule

STIG-ID|RHEL-10-200543

Vuln-ID|V-280961

RHEL-10-200560 - RHEL 10 must have the USBGuard package installed.

800-53|IA-3

CCI|CCI-001958

Rule-ID|SV-280962r1195350_rule

STIG-ID|RHEL-10-200560

Vuln-ID|V-280962

RHEL-10-200561 - RHEL 10 must have the USBGuard package enabled.

CCI|CCI-003959

Rule-ID|SV-280963r1165244_rule

STIG-ID|RHEL-10-200561

Vuln-ID|V-280963

RHEL-10-200562 - RHEL 10 must block unauthorized peripherals before establishing a connection.

Rule-ID|SV-280964r1165247_rule

STIG-ID|RHEL-10-200562

Vuln-ID|V-280964

RHEL-10-200563 - RHEL 10 must enable audit logging for the USBGuard daemon.

800-53|AU-12a.

800-53|AU-12c.

CCI|CCI-000169

CCI|CCI-000172

Rule-ID|SV-280965r1165250_rule

STIG-ID|RHEL-10-200563

Vuln-ID|V-280965

RHEL-10-200570 - RHEL 10 must have the "policycoreutils" package installed.

Detections

Analytics

DISA Red Hat Enterprise Linux 10 STIG v1r1

Audit Details

File Details

Audit Changelog

Revision 1.3

Functional Update

Miscellaneous

Revision 1.2

Miscellaneous

Revision 1.1

Functional Update


Revision 1.3 Jul 14, 2026 Functional Update RHEL-10-400235 - RHEL 10 must enforce mode \"0740\" or less permissive for local initialization files. Miscellaneous Metadata updated.
Revision 1.2 Jun 2, 2026 Miscellaneous Metadata updated.
Revision 1.1 Jun 1, 2026 Functional Update RHEL-10-700410 - RHEL 10 must elevate the SELinux context when an administrator calls the sudo command.

Detections

Analytics

DISA Red Hat Enterprise Linux 10 STIG v1r1 Download File

Audit Details

File Details

Audit Changelog

Revision 1.3

Functional Update

Miscellaneous

Revision 1.2

Miscellaneous

Revision 1.1

Functional Update

DISA Red Hat Enterprise Linux 10 STIG v1r1