DISA_STIG_Red_Hat_Enterprise_Linux_10_v1r2.audit from DISA Red Hat Enterprise Linux 10 STIG v1r2

RHEL-10-000500 - RHEL 10 must enable FIPS mode.

800-53|AC-17(2)

800-53|MA-4(6)

800-53|MA-4c.

800-53|SC-8

800-53|SC-13

CAT|I

CCI|CCI-000068

CCI|CCI-000877

CCI|CCI-001453

CCI|CCI-002418

CCI|CCI-002450

CCI|CCI-002890

CCI|CCI-003123

Rule-ID|SV-281009r1184724_rule

STIG-ID|RHEL-10-000500

Vuln-ID|V-281009

RHEL-10-000510 - RHEL 10 must implement cryptographic mechanisms to prevent unauthorized disclosure or modification of all information on local disk partitions that requires at-rest protection.

800-53|SC-28

800-53|SC-28(1)

CCI|CCI-001199

CCI|CCI-002475

CCI|CCI-002476

Rule-ID|SV-280935r1184775_rule

STIG-ID|RHEL-10-000510

Vuln-ID|V-280935

RHEL-10-000520 - RHEL 10 must use a separate file system for the system audit data path.

800-53|AU-4

CAT|III

CCI|CCI-001849

Rule-ID|SV-280936r1184726_rule

STIG-ID|RHEL-10-000520

Vuln-ID|V-280936

RHEL-10-000530 - RHEL 10 must use a separate file system for user home directories (such as "/home" or an equivalent).

800-53|SC-5

CAT|II

CCI|CCI-002385

Rule-ID|SV-280937r1184727_rule

STIG-ID|RHEL-10-000530

Vuln-ID|V-280937

RHEL-10-000540 - RHEL 10 must use a separate file system for "/tmp".

Rule-ID|SV-280938r1184728_rule

STIG-ID|RHEL-10-000540

Vuln-ID|V-280938

RHEL-10-000550 - RHEL 10 must use a separate file system for "/var".

Rule-ID|SV-280939r1184729_rule

STIG-ID|RHEL-10-000550

Vuln-ID|V-280939

RHEL-10-000560 - RHEL 10 must use a separate file system for "/var/log".

Rule-ID|SV-280940r1184730_rule

STIG-ID|RHEL-10-000560

Vuln-ID|V-280940

RHEL-10-000570 - RHEL 10 must use a separate file system for "/var/tmp".

Rule-ID|SV-280941r1184731_rule

STIG-ID|RHEL-10-000570

Vuln-ID|V-280941

RHEL-10-001000 - RHEL 10 must be a vendor-supported release.

800-53|SA-22a.

CCI|CCI-003376

Rule-ID|SV-282965r1197252_rule

STIG-ID|RHEL-10-001000

Vuln-ID|V-282965

RHEL-10-001020 - RHEL 10 must ensure cryptographic verification of vendor software packages.

800-53|CM-5(3)

CCI|CCI-003992

Rule-ID|SV-280931r1197213_rule

STIG-ID|RHEL-10-001020

Vuln-ID|V-280931

RHEL-10-001030 - RHEL 10 must check the GNU Privacy Guard (GPG) signature of software packages originating from external software repositories before installation.

Rule-ID|SV-280932r1197215_rule

STIG-ID|RHEL-10-001030

Vuln-ID|V-280932

RHEL-10-001040 - RHEL 10 must check the GNU Privacy Guard (GPG) signature of locally installed software packages before installation.

Rule-ID|SV-280933r1197217_rule

STIG-ID|RHEL-10-001040

Vuln-ID|V-280933

RHEL-10-001050 - RHEL 10 must have GNU Privacy Guard (GPG) signature verification enabled for all software repositories.

Rule-ID|SV-280934r1165157_rule

STIG-ID|RHEL-10-001050

Vuln-ID|V-280934

RHEL-10-200000 - RHEL 10 must remove all software components after updated versions have been installed.

800-53|SI-2(6)

CCI|CCI-002617

Rule-ID|SV-280942r1165181_rule

STIG-ID|RHEL-10-200000

Vuln-ID|V-280942

RHEL-10-200010 - RHEL 10 must not have the "nfs-utils" package installed.

800-53|CM-7a.

CCI|CCI-000381

Rule-ID|SV-280943r1165184_rule

STIG-ID|RHEL-10-200010

Vuln-ID|V-280943

RHEL-10-200020 - RHEL 10 must not have the "telnet-server" package installed.

Rule-ID|SV-280944r1184749_rule

STIG-ID|RHEL-10-200020

Vuln-ID|V-280944

RHEL-10-200030 - RHEL 10 must not have the "gssproxy" package installed.

Rule-ID|SV-280945r1184750_rule

STIG-ID|RHEL-10-200030

Vuln-ID|V-280945

RHEL-10-200040 - RHEL 10 must not have the tuned package installed.

Rule-ID|SV-280946r1184751_rule

STIG-ID|RHEL-10-200040

Vuln-ID|V-280946

RHEL-10-200050 - RHEL 10 must not have a Trivial File Transfer Protocol (TFTP) server package installed unless it is required by the mission, and if required, the TFTP daemon must be configured to operate in secure mode.

Rule-ID|SV-280947r1165196_rule

STIG-ID|RHEL-10-200050

Vuln-ID|V-280947

RHEL-10-200060 - RHEL 10 must not have the unbound package installed.

Rule-ID|SV-280948r1197218_rule

STIG-ID|RHEL-10-200060

Vuln-ID|V-280948

RHEL-10-200070 - RHEL 10 must not have the "tftp" package installed.

800-53|IA-5(1)(c)

CCI|CCI-000197

Rule-ID|SV-280949r1195338_rule

STIG-ID|RHEL-10-200070

Vuln-ID|V-280949

RHEL-10-200080 - RHEL 10 must not have the "gdm" package installed.

Rule-ID|SV-280950r1165205_rule

STIG-ID|RHEL-10-200080

Vuln-ID|V-280950

RHEL-10-200090 - RHEL 10 must not have a File Transfer Protocol (FTP) server package installed.

Rule-ID|SV-280951r1184744_rule

STIG-ID|RHEL-10-200090

Vuln-ID|V-280951

RHEL-10-200500 - RHEL 10 must have the "subscription-manager" package installed.

Rule-ID|SV-280952r1195340_rule

STIG-ID|RHEL-10-200500

Vuln-ID|V-280952

RHEL-10-200510 - RHEL 10 must have the "nss-tools" package installed.

Rule-ID|SV-280953r1195342_rule

STIG-ID|RHEL-10-200510

Vuln-ID|V-280953

RHEL-10-200520 - RHEL 10 must have the "s-nail" package installed.

800-53|CM-3(5)

CCI|CCI-001744

Rule-ID|SV-280954r1195344_rule

STIG-ID|RHEL-10-200520

Vuln-ID|V-280954

RHEL-10-200530 - RHEL 10 must have the "firewalld" package installed.

800-53|CM-7b.

CCI|CCI-000382

Rule-ID|SV-280955r1208792_rule

STIG-ID|RHEL-10-200530

Vuln-ID|V-280955

RHEL-10-200531 - RHEL 10 must have the "firewalld" service set to active.

800-53|AC-17(1)

CCI|CCI-002314

Rule-ID|SV-280956r1165223_rule

STIG-ID|RHEL-10-200531

Vuln-ID|V-280956

RHEL-10-200532 - RHEL 10 must employ a deny-all, allow-by-exception policy for allowing connections to other systems.

Rule-ID|SV-280957r1165226_rule

STIG-ID|RHEL-10-200532

Vuln-ID|V-280957

RHEL-10-200540 - RHEL 10 must have the "chrony" package installed.

800-53|AU-8(1)

CCI|CCI-004923

Rule-ID|SV-280958r1195348_rule

STIG-ID|RHEL-10-200540

Vuln-ID|V-280958

RHEL-10-200541 - RHEL 10 must enable the chronyd service.

Rule-ID|SV-280959r1165232_rule

STIG-ID|RHEL-10-200541

Vuln-ID|V-280959

RHEL-10-200542 - RHEL 10 must disable the chrony daemon from acting as a server.

Rule-ID|SV-280960r1165235_rule

STIG-ID|RHEL-10-200542

Vuln-ID|V-280960

RHEL-10-200543 - RHEL 10 must disable network management of the chrony daemon.

Rule-ID|SV-280961r1165238_rule

STIG-ID|RHEL-10-200543

Vuln-ID|V-280961

RHEL-10-200560 - RHEL 10 must have the USBGuard package installed.

800-53|IA-3

CCI|CCI-001958

Rule-ID|SV-280962r1195350_rule

STIG-ID|RHEL-10-200560

Vuln-ID|V-280962

RHEL-10-200561 - RHEL 10 must have the USBGuard package enabled.

CCI|CCI-003959

Rule-ID|SV-280963r1165244_rule

STIG-ID|RHEL-10-200561

Vuln-ID|V-280963

RHEL-10-200562 - RHEL 10 must block unauthorized peripherals before establishing a connection.

Rule-ID|SV-280964r1165247_rule

STIG-ID|RHEL-10-200562

Vuln-ID|V-280964

RHEL-10-200563 - RHEL 10 must enable audit logging for the USBGuard daemon.

800-53|AU-12a.

800-53|AU-12c.

CCI|CCI-000169

CCI|CCI-000172

Rule-ID|SV-280965r1165250_rule

STIG-ID|RHEL-10-200563

Vuln-ID|V-280965

RHEL-10-200570 - RHEL 10 must have the "policycoreutils" package installed.

800-53|SC-3

CCI|CCI-001084

Detections

Analytics

DISA Red Hat Enterprise Linux 10 STIG v1r2

Audit Details

File Details

Audit Changelog

Revision 1.1

Functional Update

Miscellaneous