DISA Red Hat Enterprise Linux 8 STIG v2r7

Warning! Audit Deprecated

This audit file has been deprecated and will be removed in a future update.

View Next Version

Audit Details

Name: DISA Red Hat Enterprise Linux 8 STIG v2r7

Updated: 8/7/2026

Authority: DISA STIG

Plugin: Unix

Revision: 1.4

Estimated Item Count: 367

File Details

Filename: DISA_STIG_Red_Hat_Enterprise_Linux_8_v2r7.audit

Size: 971 kB

MD5: 6f9a9e35de5ed628ef2012fa4d51867c

SHA256: ad77837a14f9223131e9bb0aaf04042e7d05a9bb1967174d15443d4e4337afc0

Audit Items

Description	Categories
DISA_STIG_Red_Hat_Enterprise_Linux_8_v2r7.audit from DISA Red Hat Enterprise Linux 8 STIG v2r7
RHEL-08-010000 - RHEL 8 must be a vendor-supported release.	CONFIGURATION MANAGEMENT
RHEL-08-010010 - RHEL 8 vendor packaged system security patches and updates must be installed and up to date.	CONFIGURATION MANAGEMENT
RHEL-08-010015 - RHEL 8 must have the crypto-policies package installed.	SYSTEM AND COMMUNICATIONS PROTECTION
RHEL-08-010019 - RHEL 8 must ensure cryptographic verification of vendor software packages.	CONFIGURATION MANAGEMENT
RHEL-08-010020 - RHEL 8 must implement a FIPS 140-3-compliant systemwide cryptographic policy.	ACCESS CONTROL
RHEL-08-010030 - All RHEL 8 local disk partitions must implement cryptographic mechanisms to prevent unauthorized disclosure or modification of all information that requires at rest protection.	SYSTEM AND COMMUNICATIONS PROTECTION
RHEL-08-010040 - RHEL 8 must display the Standard Mandatory DOD Notice and Consent Banner before granting local or remote access to the system via a ssh logon.	ACCESS CONTROL
RHEL-08-010049 - RHEL 8 must display a banner before granting local or remote access to the system via a graphical user logon.	ACCESS CONTROL
RHEL-08-010050 - RHEL 8 must display the Standard Mandatory DoD Notice and Consent Banner before granting local or remote access to the system via a graphical user logon.	ACCESS CONTROL
RHEL-08-010060 - RHEL 8 must display the Standard Mandatory DoD Notice and Consent Banner before granting local or remote access to the system via a command line user logon.	ACCESS CONTROL
RHEL-08-010070 - All RHEL 8 remote access methods must be monitored.	ACCESS CONTROL
RHEL-08-010090 - RHEL 8, for PKI-based authentication, must validate certificates by constructing a certification path (which includes status information) to an accepted trust anchor.	IDENTIFICATION AND AUTHENTICATION
RHEL-08-010100 - RHEL 8, for certificate-based authentication, must enforce authorized access to the corresponding private key.	IDENTIFICATION AND AUTHENTICATION
RHEL-08-010110 - RHEL 8 must encrypt all stored passwords with a FIPS 140-2 approved cryptographic hashing algorithm.	IDENTIFICATION AND AUTHENTICATION
RHEL-08-010120 - RHEL 8 must employ FIPS 140-2 approved cryptographic hashing algorithms for all stored passwords.	IDENTIFICATION AND AUTHENTICATION
RHEL-08-010121 - The RHEL 8 operating system must not have accounts configured with blank or null passwords.	CONFIGURATION MANAGEMENT
RHEL-08-010130 - The RHEL 8 shadow password suite must be configured to use a sufficient number of hashing rounds.	IDENTIFICATION AND AUTHENTICATION
RHEL-08-010140 - RHEL 8 operating systems booted with United Extensible Firmware Interface (UEFI) must require authentication upon booting into single-user mode and maintenance.	ACCESS CONTROL
RHEL-08-010141 - RHEL 8 operating systems booted with United Extensible Firmware Interface (UEFI) must require a unique superusers name upon booting into single-user mode and maintenance.	ACCESS CONTROL
RHEL-08-010149 - RHEL 8 operating systems booted with a BIOS must require a unique superusers name upon booting into single-user and maintenance modes.	ACCESS CONTROL
RHEL-08-010150 - RHEL 8 operating systems booted with a BIOS must require authentication upon booting into single-user and maintenance modes.	ACCESS CONTROL
RHEL-08-010151 - RHEL 8 operating systems must require authentication upon booting into rescue mode.	ACCESS CONTROL
RHEL-08-010152 - RHEL 8 operating systems must require authentication upon booting into emergency mode.	ACCESS CONTROL
RHEL-08-010159 - The RHEL 8 pam_unix.so module must be configured in the system-auth file to use a FIPS 140-2 approved cryptographic hashing algorithm for system authentication.	IDENTIFICATION AND AUTHENTICATION
RHEL-08-010160 - The RHEL 8 pam_unix.so module must be configured in the password-auth file to use a FIPS 140-2 approved cryptographic hashing algorithm for system authentication.	IDENTIFICATION AND AUTHENTICATION
RHEL-08-010161 - RHEL 8 must prevent system daemons from using Kerberos for authentication.	IDENTIFICATION AND AUTHENTICATION
RHEL-08-010162 - The krb5-workstation package must not be installed on RHEL 8.	IDENTIFICATION AND AUTHENTICATION
RHEL-08-010163 - The krb5-server package must not be installed on RHEL 8.	IDENTIFICATION AND AUTHENTICATION
RHEL-08-010170 - RHEL 8 must use a Linux Security Module configured to enforce limits on system services.	SYSTEM AND COMMUNICATIONS PROTECTION
RHEL-08-010171 - RHEL 8 must have policycoreutils package installed.	SYSTEM AND COMMUNICATIONS PROTECTION
RHEL-08-010190 - A sticky bit must be set on all RHEL 8 public directories to prevent unauthorized and unintended information transferred via shared system resources.	SYSTEM AND COMMUNICATIONS PROTECTION
RHEL-08-010200 - RHEL 8 must be configured so that all network connections associated with SSH traffic terminate after becoming unresponsive.	SYSTEM AND COMMUNICATIONS PROTECTION
RHEL-08-010201 - RHEL 8 must be configured so that all network connections associated with SSH traffic are terminated after 10 minutes of becoming unresponsive.	SYSTEM AND COMMUNICATIONS PROTECTION
RHEL-08-010210 - The RHEL 8 /var/log/messages file must have mode 0640 or less permissive.	SYSTEM AND INFORMATION INTEGRITY
RHEL-08-010220 - The RHEL 8 /var/log/messages file must be owned by root.	SYSTEM AND INFORMATION INTEGRITY
RHEL-08-010230 - The RHEL 8 /var/log/messages file must be group-owned by root.	SYSTEM AND INFORMATION INTEGRITY
RHEL-08-010240 - The RHEL 8 /var/log directory must have mode 0755 or less permissive.	SYSTEM AND INFORMATION INTEGRITY
RHEL-08-010250 - The RHEL 8 /var/log directory must be owned by root.	SYSTEM AND INFORMATION INTEGRITY
RHEL-08-010260 - The RHEL 8 /var/log directory must be group-owned by root.	SYSTEM AND INFORMATION INTEGRITY
RHEL-08-010270 - RHEL 8 cryptographic policy must not be overridden.	SYSTEM AND COMMUNICATIONS PROTECTION
RHEL-08-010275 - RHEL 8 must implement DOD-approved encryption in the bind package.	SYSTEM AND COMMUNICATIONS PROTECTION
RHEL-08-010280 - RHEL 8 IP tunnels must use FIPS 140-3-approved cryptographic algorithms.	ACCESS CONTROL
RHEL-08-010290 - The RHEL 8 SSH server must be configured to use only Message Authentication Codes (MACs) employing FIPS 140-3-validated cryptographic hash algorithms to protect the confidentiality of SSH server connections.	ACCESS CONTROL
RHEL-08-010291 - The RHEL 8 SSH server must be configured to use only DOD-approved encryption ciphers employing FIPS 140-3-validated cryptographic hash algorithms to protect the confidentiality of SSH server connections.	ACCESS CONTROL
RHEL-08-010292 - RHEL 8 must ensure the SSH server uses strong entropy.	CONFIGURATION MANAGEMENT
RHEL-08-010296 - The RHEL 8 SSH client must be configured to use only DOD-approved Message Authentication Codes (MACs) employing FIPS 140-3-validated cryptographic hash algorithms to protect the confidentiality of SSH client connections.	ACCESS CONTROL
RHEL-08-010297 - The RHEL 8 SSH client must be configured to use only DOD-approved encryption ciphers employing FIPS 140-3-validated cryptographic hash algorithms to protect the confidentiality of SSH client connections.	ACCESS CONTROL
RHEL-08-010300 - RHEL 8 system commands must have mode 755 or less permissive.	CONFIGURATION MANAGEMENT
RHEL-08-010310 - RHEL 8 system commands must be owned by root.	CONFIGURATION MANAGEMENT

Detections

Analytics

DISA Red Hat Enterprise Linux 8 STIG v2r7

Warning! Audit Deprecated

Audit Details

File Details

Audit Items