DISA_Red_Hat_Enterprise_Linux_8_STIG_v2r3.audit from DISA Red Hat Enterprise Linux 8 STIG v2r3

RHEL-08-010000 - RHEL 8 must be a vendor-supported release.

800-53|CM-6b.

CAT|I

CCI|CCI-000366

Rule-ID|SV-230221r1017040_rule

STIG-ID|RHEL-08-010000

Vuln-ID|V-230221

RHEL-08-010010 - RHEL 8 vendor packaged system security patches and updates must be installed and up to date.

CAT|II

Rule-ID|SV-230222r1017041_rule

STIG-ID|RHEL-08-010010

Vuln-ID|V-230222

RHEL-08-010019 - RHEL 8 must ensure cryptographic verification of vendor software packages.

800-53|CM-5(3)

CCI|CCI-001749

CCI|CCI-003992

Rule-ID|SV-256973r1017373_rule

STIG-ID|RHEL-08-010019

Vuln-ID|V-256973

RHEL-08-010020 - RHEL 8 must implement NIST FIPS-validated cryptography for the following: To provision digital signatures, to generate cryptographic hashes, and to protect data requiring data-at-rest protections in accordance with applicable federal laws, Executive Orders, directives, policies, regulations, and standards.

800-53|AC-17(2)

CCI|CCI-000068

Rule-ID|SV-230223r1069327_rule

STIG-ID|RHEL-08-010020

Vuln-ID|V-230223

RHEL-08-010030 - All RHEL 8 local disk partitions must implement cryptographic mechanisms to prevent unauthorized disclosure or modification of all information that requires at rest protection.

800-53|SC-28

CCI|CCI-001199

Rule-ID|SV-230224r1044787_rule

STIG-ID|RHEL-08-010030

Vuln-ID|V-230224

RHEL-08-010040 - RHEL 8 must display the Standard Mandatory DOD Notice and Consent Banner before granting local or remote access to the system via a ssh logon.

800-53|AC-8a.

CCI|CCI-000048

Rule-ID|SV-230225r1069297_rule

STIG-ID|RHEL-08-010040

Vuln-ID|V-230225

RHEL-08-010049 - RHEL 8 must display a banner before granting local or remote access to the system via a graphical user logon.

Rule-ID|SV-244519r1017326_rule

STIG-ID|RHEL-08-010049

Vuln-ID|V-244519

RHEL-08-010050 - RHEL 8 must display the Standard Mandatory DoD Notice and Consent Banner before granting local or remote access to the system via a graphical user logon.

Rule-ID|SV-230226r1069298_rule

STIG-ID|RHEL-08-010050

Vuln-ID|V-230226

RHEL-08-010060 - RHEL 8 must display the Standard Mandatory DoD Notice and Consent Banner before granting local or remote access to the system via a command line user logon.

Rule-ID|SV-230227r1017046_rule

STIG-ID|RHEL-08-010060

Vuln-ID|V-230227

RHEL-08-010070 - All RHEL 8 remote access methods must be monitored.

800-53|AC-17(1)

CCI|CCI-000067

Rule-ID|SV-230228r1069299_rule

STIG-ID|RHEL-08-010070

Vuln-ID|V-230228

RHEL-08-010090 - RHEL 8, for PKI-based authentication, must validate certificates by constructing a certification path (which includes status information) to an accepted trust anchor.

800-53|IA-5(2)(a)

CCI|CCI-000185

Rule-ID|SV-230229r1017048_rule

STIG-ID|RHEL-08-010090

Vuln-ID|V-230229

RHEL-08-010100 - RHEL 8, for certificate-based authentication, must enforce authorized access to the corresponding private key.

800-53|IA-5(2)(b)

CCI|CCI-000186

Rule-ID|SV-230230r1069287_rule

STIG-ID|RHEL-08-010100

Vuln-ID|V-230230

RHEL-08-010110 - RHEL 8 must encrypt all stored passwords with a FIPS 140-2 approved cryptographic hashing algorithm.

800-53|IA-5(1)(c)

CCI|CCI-000196

CCI|CCI-004062

Rule-ID|SV-230231r1017050_rule

STIG-ID|RHEL-08-010110

Vuln-ID|V-230231

RHEL-08-010120 - RHEL 8 must employ FIPS 140-2 approved cryptographic hashing algorithms for all stored passwords.

Rule-ID|SV-230232r1017051_rule

STIG-ID|RHEL-08-010120

Vuln-ID|V-230232

RHEL-08-010121 - The RHEL 8 operating system must not have accounts configured with blank or null passwords.

Rule-ID|SV-251706r1017359_rule

STIG-ID|RHEL-08-010121

Vuln-ID|V-251706

RHEL-08-010130 - The RHEL 8 shadow password suite must be configured to use a sufficient number of hashing rounds.

Rule-ID|SV-230233r1044790_rule

STIG-ID|RHEL-08-010130

Vuln-ID|V-230233

RHEL-08-010140 - RHEL 8 operating systems booted with United Extensible Firmware Interface (UEFI) must require authentication upon booting into single-user mode and maintenance.

800-53|AC-3

CCI|CCI-000213

Rule-ID|SV-230234r1017053_rule

STIG-ID|RHEL-08-010140

Vuln-ID|V-230234

RHEL-08-010141 - RHEL 8 operating systems booted with United Extensible Firmware Interface (UEFI) must require a unique superusers name upon booting into single-user mode and maintenance.

Rule-ID|SV-244521r1017327_rule

STIG-ID|RHEL-08-010141

Vuln-ID|V-244521

RHEL-08-010149 - RHEL 8 operating systems booted with a BIOS must require  a unique superusers name upon booting into single-user and maintenance modes.

Rule-ID|SV-244522r1017328_rule

STIG-ID|RHEL-08-010149

Vuln-ID|V-244522

RHEL-08-010150 - RHEL 8 operating systems booted with a BIOS must require authentication upon booting into single-user and maintenance modes.

Rule-ID|SV-230235r1017054_rule

STIG-ID|RHEL-08-010150

Vuln-ID|V-230235

RHEL-08-010151 - RHEL 8 operating systems must require authentication upon booting into rescue mode.

Rule-ID|SV-230236r1017055_rule

STIG-ID|RHEL-08-010151

Vuln-ID|V-230236

RHEL-08-010152 - RHEL 8 operating systems must require authentication upon booting into emergency mode.

Rule-ID|SV-244523r1017329_rule

STIG-ID|RHEL-08-010152

Vuln-ID|V-244523

RHEL-08-010159 - The RHEL 8 pam_unix.so module must be configured in the system-auth file to use a FIPS 140-2 approved cryptographic hashing algorithm for system authentication.

800-53|IA-7

CCI|CCI-000803

Rule-ID|SV-244524r1017330_rule

STIG-ID|RHEL-08-010159

Vuln-ID|V-244524

RHEL-08-010160 - The RHEL 8 pam_unix.so module must be configured in the password-auth file to use a FIPS 140-2 approved cryptographic hashing algorithm for system authentication.

Rule-ID|SV-230237r1017056_rule

STIG-ID|RHEL-08-010160

Vuln-ID|V-230237

RHEL-08-010161 - RHEL 8 must prevent system daemons from using Kerberos for authentication.

Rule-ID|SV-230238r1017057_rule

STIG-ID|RHEL-08-010161

Vuln-ID|V-230238

RHEL-08-010162 - The krb5-workstation package must not be installed on RHEL 8.

Rule-ID|SV-230239r1017058_rule

STIG-ID|RHEL-08-010162

Vuln-ID|V-230239

RHEL-08-010163 - The krb5-server package must not be installed on RHEL 8.

Rule-ID|SV-237640r1017323_rule

STIG-ID|RHEL-08-010163

Vuln-ID|V-237640

RHEL-08-010170 - RHEL 8 must use a Linux Security Module configured to enforce limits on system services.

800-53|SC-3

CCI|CCI-001084

Rule-ID|SV-230240r1017059_rule

STIG-ID|RHEL-08-010170

Vuln-ID|V-230240

RHEL-08-010171 - RHEL 8 must have policycoreutils package installed.

CAT|III

Rule-ID|SV-230241r1017060_rule

STIG-ID|RHEL-08-010171

Vuln-ID|V-230241

RHEL-08-010190 - A sticky bit must be set on all RHEL 8 public directories to prevent unauthorized and unintended information transferred via shared system resources.

800-53|SC-4

CCI|CCI-001090

Rule-ID|SV-230243r1069294_rule

STIG-ID|RHEL-08-010190

Vuln-ID|V-230243

RHEL-08-010200 - RHEL 8 must be configured so that all network connections associated with SSH traffic terminate after becoming unresponsive.

800-53|SC-10

CCI|CCI-001133

Rule-ID|SV-230244r1069300_rule

STIG-ID|RHEL-08-010200

Vuln-ID|V-230244

RHEL-08-010201 - RHEL 8 must be configured so that all network connections associated with SSH traffic are terminated after 10 minutes of becoming unresponsive.

Rule-ID|SV-244525r1017331_rule

STIG-ID|RHEL-08-010201

Vuln-ID|V-244525

RHEL-08-010210 - The RHEL 8 /var/log/messages file must have mode 0640 or less permissive.

800-53|SI-11b.

CCI|CCI-001314

Rule-ID|SV-230245r1017063_rule

STIG-ID|RHEL-08-010210

Vuln-ID|V-230245

RHEL-08-010220 - The RHEL 8 /var/log/messages file must be owned by root.

Rule-ID|SV-230246r1017064_rule

STIG-ID|RHEL-08-010220

Vuln-ID|V-230246

RHEL-08-010230 - The RHEL 8 /var/log/messages file must be group-owned by root.

Rule-ID|SV-230247r1017065_rule

STIG-ID|RHEL-08-010230

Vuln-ID|V-230247

RHEL-08-010240 - The RHEL 8 /var/log directory must have mode 0755 or less permissive.

Rule-ID|SV-230248r1069291_rule

STIG-ID|RHEL-08-010240

Vuln-ID|V-230248

RHEL-08-010250 - The RHEL 8 /var/log directory must be owned by root.

Rule-ID|SV-230249r1017067_rule

STIG-ID|RHEL-08-010250

Vuln-ID|V-230249

RHEL-08-010260 - The RHEL 8 /var/log directory must be group-owned by root.

Rule-ID|SV-230250r1017068_rule

STIG-ID|RHEL-08-010260

Vuln-ID|V-230250

RHEL-08-010287 - The RHEL 8 SSH daemon must be configured to use system-wide crypto policies.

CCI|CCI-001453

Rule-ID|SV-244526r1017332_rule

STIG-ID|RHEL-08-010287

Vuln-ID|V-244526

RHEL-08-010290 - The RHEL 8 SSH server must be configured to use only Message Authentication Codes (MACs) employing FIPS 140-3 validated cryptographic hash algorithms.

Rule-ID|SV-230251r1044814_rule

STIG-ID|RHEL-08-010290

Vuln-ID|V-230251

RHEL-08-010291 - The RHEL 8 operating system must implement DOD-approved encryption to protect the confidentiality of SSH server connections.

Detections

Analytics

DISA Red Hat Enterprise Linux 8 STIG v2r3

Audit Details

File Details

Audit Changelog

Revision 1.1

Functional Update

Miscellaneous