DISA_STIG_SLES_12_v3r4.audit from DISA SUSE Linux Enterprise Server 12 v3r4 STIG

SLES-12-010000 - The SUSE operating system must be a vendor-supported release.

CAT|I

CCI|CCI-001230

Rule-ID|SV-217101r1155786_rule

STIG-ID|SLES-12-010000

STIG-Legacy|SV-91741

STIG-Legacy|V-77045

Vuln-ID|V-217101

SLES-12-010010 - Vendor-packaged SUSE operating system security patches and updates must be installed and up to date.

CAT|II

CCI|CCI-001227

Rule-ID|SV-217102r991589_rule

STIG-ID|SLES-12-010010

STIG-Legacy|SV-91743

STIG-Legacy|V-77047

Vuln-ID|V-217102

SLES-12-010020 - The SUSE operating system must display the Standard Mandatory DoD Notice and Consent Banner until users acknowledge the usage conditions and take explicit actions to log on for further access to the local graphical user interface.

CCI|CCI-000048

CCI|CCI-000050

Rule-ID|SV-217103r958390_rule

STIG-ID|SLES-12-010020

STIG-Legacy|SV-91745

STIG-Legacy|V-77049

Vuln-ID|V-217103

SLES-12-010030 - The SUSE operating system must display the Standard Mandatory DoD Notice and Consent Banner before granting access via local console.

Rule-ID|SV-217104r958390_rule

STIG-ID|SLES-12-010030

STIG-Legacy|SV-91747

STIG-Legacy|V-77051

Vuln-ID|V-217104

SLES-12-010040 - The SUSE operating system must display a banner before granting local or remote access to the system via a graphical user logon.

CCI|CCI-001384

CCI|CCI-001385

CCI|CCI-001386

CCI|CCI-001387

CCI|CCI-001388

Rule-ID|SV-217105r958586_rule

STIG-ID|SLES-12-010040

STIG-Legacy|SV-91749

STIG-Legacy|V-77053

Vuln-ID|V-217105

SLES-12-010050 - The SUSE operating system must display the approved Standard Mandatory DoD Notice before granting local or remote access to the system via a graphical user logon.

Rule-ID|SV-217106r958586_rule

STIG-ID|SLES-12-010050

STIG-Legacy|SV-91751

STIG-Legacy|V-77055

Vuln-ID|V-217106

SLES-12-010060 - The SUSE operating system must be able to lock the graphical user interface (GUI).

CCI|CCI-000056

CCI|CCI-000057

CCI|CCI-000058

CCI|CCI-000060

Rule-ID|SV-217107r1015203_rule

STIG-ID|SLES-12-010060

STIG-Legacy|SV-91753

STIG-Legacy|V-77057

Vuln-ID|V-217107

SLES-12-010070 - The SUSE operating system must utilize vlock to allow for session locking.

CAT|III

Rule-ID|SV-217108r1015204_rule

STIG-ID|SLES-12-010070

STIG-Legacy|SV-91755

STIG-Legacy|V-77059

Vuln-ID|V-217108

SLES-12-010080 - The SUSE operating system must initiate a session lock after a 15-minute period of inactivity for the graphical user interface.

Rule-ID|SV-217109r958402_rule

STIG-ID|SLES-12-010080

STIG-Legacy|SV-91757

STIG-Legacy|V-77061

Vuln-ID|V-217109

SLES-12-010090 - The SUSE operating system must initiate a session lock after a 10-minute period of inactivity.

Rule-ID|SV-217110r1015002_rule

STIG-ID|SLES-12-010090

STIG-Legacy|SV-91759

STIG-Legacy|V-77063

Vuln-ID|V-217110

SLES-12-010100 - The SUSE operating system must conceal, via the session lock, information previously visible on the display with a publicly viewable image in the graphical user interface.

Rule-ID|SV-217111r958404_rule

STIG-ID|SLES-12-010100

STIG-Legacy|SV-91761

STIG-Legacy|V-77065

Vuln-ID|V-217111

SLES-12-010109 - The SUSE operating system must specify the default 'include' directory for the /etc/sudoers file - include directory for the /etc/sudoers file.

CCI|CCI-000366

Rule-ID|SV-251719r991589_rule

STIG-ID|SLES-12-010109

Vuln-ID|V-251719

SLES-12-010110 - The SUSE operating system must reauthenticate users when changing authenticators, roles, or escalating privileges.

CCI|CCI-002038

CCI|CCI-004895

Rule-ID|SV-217112r1050789_rule

STIG-ID|SLES-12-010110

STIG-Legacy|SV-91763

STIG-Legacy|V-77067

Vuln-ID|V-217112

SLES-12-010111 - The SUSE operating system must restrict privilege elevation to authorized personnel.

Rule-ID|SV-237603r991589_rule

STIG-ID|SLES-12-010111

Vuln-ID|V-237603

SLES-12-010112 - The SUSE operating system must use the invoking user's password for privilege escalation when using 'sudo' - sudo.

CCI|CCI-002227

Rule-ID|SV-237604r991589_rule

STIG-ID|SLES-12-010112

Vuln-ID|V-237604

SLES-12-010113 - The SUSE operating system must require re-authentication when using the 'sudo' command - sudo command.

Rule-ID|SV-237605r1050789_rule

STIG-ID|SLES-12-010113

Vuln-ID|V-237605

SLES-12-010114 - The SUSE operating system must not be configured to bypass password requirements for privilege escalation.

Rule-ID|SV-251720r1050789_rule

STIG-ID|SLES-12-010114

Vuln-ID|V-251720

SLES-12-010120 - The SUSE operating system must limit the number of concurrent sessions to 10 for all accounts and/or account types.

CCI|CCI-000054

Rule-ID|SV-217113r958398_rule

STIG-ID|SLES-12-010120

STIG-Legacy|SV-91765

STIG-Legacy|V-77069

Vuln-ID|V-217113

SLES-12-010130 - The SUSE operating system must lock an account after three consecutive invalid access attempts.

CCI|CCI-000044

Rule-ID|SV-217114r958388_rule

STIG-ID|SLES-12-010130

STIG-Legacy|SV-91767

STIG-Legacy|V-77071

Vuln-ID|V-217114

SLES-12-010140 - The SUSE operating system must enforce a delay of at least four (4) seconds between logon prompts following a failed logon attempt.

Rule-ID|SV-217116r991588_rule

STIG-ID|SLES-12-010140

STIG-Legacy|SV-91769

STIG-Legacy|V-77073

Vuln-ID|V-217116

SLES-12-010150 - The SUSE operating system must enforce passwords that contain at least one upper-case character.

CCI|CCI-000192

CCI|CCI-004066

Rule-ID|SV-217117r1015206_rule

STIG-ID|SLES-12-010150

STIG-Legacy|SV-91771

STIG-Legacy|V-77075

Vuln-ID|V-217117

SLES-12-010160 - The SUSE operating system must enforce passwords that contain at least one lower-case character.

CCI|CCI-000193

Rule-ID|SV-217118r1015207_rule

STIG-ID|SLES-12-010160

STIG-Legacy|SV-91773

STIG-Legacy|V-77077

Vuln-ID|V-217118

SLES-12-010170 - The SUSE operating system must enforce passwords that contain at least one numeric character.

CCI|CCI-000194

Rule-ID|SV-217119r1015208_rule

STIG-ID|SLES-12-010170

STIG-Legacy|SV-91775

STIG-Legacy|V-77079

Vuln-ID|V-217119

SLES-12-010180 - The SUSE operating system must enforce passwords that contain at least one special character.

CCI|CCI-001619

Rule-ID|SV-217120r1015209_rule

STIG-ID|SLES-12-010180

STIG-Legacy|SV-91777

STIG-Legacy|V-77081

Vuln-ID|V-217120

SLES-12-010190 - The SUSE operating system must require the change of at least eight (8) of the total number of characters when passwords are changed.

CCI|CCI-000195

Rule-ID|SV-217121r1015210_rule

STIG-ID|SLES-12-010190

STIG-Legacy|SV-91783

STIG-Legacy|V-77087

Vuln-ID|V-217121

SLES-12-010210 - The SUSE operating system must employ FIPS 140-2 approved cryptographic hashing algorithm for system authentication (login.defs).

CCI|CCI-000803

Rule-ID|SV-217122r971535_rule

STIG-ID|SLES-12-010210

STIG-Legacy|SV-91789

STIG-Legacy|V-77093

Vuln-ID|V-217122

SLES-12-010220 - The SUSE operating system must employ FIPS 140-2-approved cryptographic hashing algorithms for all stored passwords.

CCI|CCI-000196

CCI|CCI-004062

Rule-ID|SV-217123r1015211_rule

STIG-ID|SLES-12-010220

STIG-Legacy|SV-91795

STIG-Legacy|V-77099

Vuln-ID|V-217123

SLES-12-010221 - The SUSE operating system must not have accounts configured with blank or null passwords.

Rule-ID|SV-251721r991589_rule

STIG-ID|SLES-12-010221

Vuln-ID|V-251721

SLES-12-010230 - The SUSE operating system must configure the Linux Pluggable Authentication Modules (PAM) to only store encrypted representations of passwords.

Rule-ID|SV-217124r1015212_rule

STIG-ID|SLES-12-010230

STIG-Legacy|SV-91801

STIG-Legacy|V-77105

Vuln-ID|V-217124

SLES-12-010231 - The SUSE operating system must not be configured to allow blank or null passwords.

Rule-ID|SV-217125r991589_rule

STIG-ID|SLES-12-010231

STIG-Legacy|SV-96499

STIG-Legacy|V-81785

Vuln-ID|V-217125

SLES-12-010240 - The SUSE operating system must employ FIPS 140-3 approved cryptographic hashing algorithms for all stored passwords.

Detections

Analytics

DISA SLES 12 STIG v3r4

Warning! Audit Deprecated

Audit Details

File Details

Audit Changelog

Revision 1.1

Miscellaneous