Item Search

NameAudit NamePluginCategory
OL09-00-000135 - OL 9 must not have a Trivial File Transfer Protocol (TFTP) server package installed.DISA Oracle Linux 9 STIG v1r6Unix

CONFIGURATION MANAGEMENT

OL09-00-000210 - OL 9 policycoreutils-python-utils package must be installed.DISA Oracle Linux 9 STIG v1r6Unix

CONFIGURATION MANAGEMENT

OL09-00-000240 - OL 9 must have the crypto-policies package installed.DISA Oracle Linux 9 STIG v1r6Unix

MAINTENANCE, SYSTEM AND COMMUNICATIONS PROTECTION

OL09-00-000242 - OL 9 must not allow the cryptographic policy to be overridden.DISA Oracle Linux 9 STIG v1r6Unix

MAINTENANCE, SYSTEM AND COMMUNICATIONS PROTECTION

OL09-00-000250 - OL 9 networked systems must have SSH installed.DISA Oracle Linux 9 STIG v1r6Unix

SYSTEM AND COMMUNICATIONS PROTECTION

OL09-00-000256 - OL 9 must display the Standard Mandatory DOD Notice and Consent Banner before granting local or remote access to the system via a SSH logon.DISA Oracle Linux 9 STIG v1r6Unix

ACCESS CONTROL

OL09-00-000300 - OL 9 must have the Advanced Intrusion Detection Environment (AIDE) package installed.DISA Oracle Linux 9 STIG v1r6Unix

CONFIGURATION MANAGEMENT, SYSTEM AND INFORMATION INTEGRITY

OL09-00-000310 - OL 9 must have the chrony package installed.DISA Oracle Linux 9 STIG v1r6Unix

AUDIT AND ACCOUNTABILITY

OL09-00-000320 - OL 9 must have the USBGuard package installed.DISA Oracle Linux 9 STIG v1r6Unix

IDENTIFICATION AND AUTHENTICATION

OL09-00-000351 - OL 9 must be configured so that the rsyslog service is active.DISA Oracle Linux 9 STIG v1r6Unix

CONFIGURATION MANAGEMENT

OL09-00-000410 - OL 9 must have the libreswan package installed.DISA Oracle Linux 9 STIG v1r6Unix

IDENTIFICATION AND AUTHENTICATION

OL09-00-000440 - OL 9 must have the audit package installed.DISA Oracle Linux 9 STIG v1r6Unix

AUDIT AND ACCOUNTABILITY, MAINTENANCE

OL09-00-000495 - OL 9 must remove all software components after updated versions have been installed.DISA Oracle Linux 9 STIG v1r6Unix

SYSTEM AND INFORMATION INTEGRITY

OL09-00-000497 - OL 9 must check the GPG signature of software packages originating from external software repositories before installation.DISA Oracle Linux 9 STIG v1r6Unix

CONFIGURATION MANAGEMENT

OL09-00-000498 - OL 9 must have GPG signature verification enabled for all software repositories.DISA Oracle Linux 9 STIG v1r6Unix

CONFIGURATION MANAGEMENT

OL09-00-000499 - OL 9 must ensure cryptographic verification of vendor software packages.DISA Oracle Linux 9 STIG v1r6Unix

CONFIGURATION MANAGEMENT

OL09-00-000515 - OL 9 must generate audit records for all account creations, modifications, disabling, and termination events that affect /etc/gshadow.DISA Oracle Linux 9 STIG v1r6Unix

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY, MAINTENANCE

OL09-00-000530 - OL 9 must generate audit records for all account creations, modifications, disabling, and termination events that affect /etc/shadow.DISA Oracle Linux 9 STIG v1r6Unix

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY, MAINTENANCE

OL09-00-000570 - OL 9 must audit all uses of the crontab command.DISA Oracle Linux 9 STIG v1r6Unix

AUDIT AND ACCOUNTABILITY, MAINTENANCE

OL09-00-000585 - OL 9 must audit all uses of the pam_timestamp_check command.DISA Oracle Linux 9 STIG v1r6Unix

AUDIT AND ACCOUNTABILITY, MAINTENANCE

OL09-00-000620 - OL 9 must audit all uses of the unix_chkpwd command.DISA Oracle Linux 9 STIG v1r6Unix

AUDIT AND ACCOUNTABILITY, MAINTENANCE

OL09-00-000625 - OL 9 must audit all uses of the userhelper command.DISA Oracle Linux 9 STIG v1r6Unix

AUDIT AND ACCOUNTABILITY, MAINTENANCE

OL09-00-000630 - OL 9 must audit all uses of the mount command.DISA Oracle Linux 9 STIG v1r6Unix

AUDIT AND ACCOUNTABILITY, MAINTENANCE

OL09-00-000660 - OL 9 must audit all uses of the setsebool command.DISA Oracle Linux 9 STIG v1r6Unix

AUDIT AND ACCOUNTABILITY, MAINTENANCE

OL09-00-000670 - OL 9 must audit all uses of the sudo command.DISA Oracle Linux 9 STIG v1r6Unix

AUDIT AND ACCOUNTABILITY, MAINTENANCE

OL09-00-000690 - OL 9 must audit all uses of the init_module and finit_module system calls.DISA Oracle Linux 9 STIG v1r6Unix

AUDIT AND ACCOUNTABILITY, MAINTENANCE

OL09-00-000735 - OL 9 must be configured so that successful/unsuccessful uses of the poweroff command generate an audit record.DISA Oracle Linux 9 STIG v1r6Unix

AUDIT AND ACCOUNTABILITY

OL09-00-000795 - OL 9 audit logs file must have mode 0600 or less permissive to prevent unauthorized access to the audit log.DISA Oracle Linux 9 STIG v1r6Unix

AUDIT AND ACCOUNTABILITY, SYSTEM AND INFORMATION INTEGRITY

OL09-00-000860 - OL 9 must take appropriate action when the internal event queue is full.DISA Oracle Linux 9 STIG v1r6Unix

AUDIT AND ACCOUNTABILITY

OL09-00-000935 - OL 9 must prohibit the use of cached authenticators after one day.DISA Oracle Linux 9 STIG v1r6Unix

IDENTIFICATION AND AUTHENTICATION

OL09-00-000940 - OL 9 must use the CAC smart card driver.DISA Oracle Linux 9 STIG v1r6Unix

IDENTIFICATION AND AUTHENTICATION

OL09-00-001040 - OL 9 must require the change of at least four character classes when passwords are changed.DISA Oracle Linux 9 STIG v1r6Unix

IDENTIFICATION AND AUTHENTICATION

OL09-00-001050 - OL 9 must be configured so that user and group account administration utilities are configured to store only encrypted representations of passwords.DISA Oracle Linux 9 STIG v1r6Unix

IDENTIFICATION AND AUTHENTICATION

OL09-00-001060 - OL 9 pam_unix.so module must be configured in the password-auth file to use a FIPS 140-3 approved cryptographic hashing algorithm for system authentication.DISA Oracle Linux 9 STIG v1r6Unix

IDENTIFICATION AND AUTHENTICATION

OL09-00-001070 - OL 9 system-auth must be configured to use a sufficient number of hashing rounds.DISA Oracle Linux 9 STIG v1r6Unix

IDENTIFICATION AND AUTHENTICATION

OL09-00-001105 - OL 9 passwords must be created with a minimum of 15 characters.DISA Oracle Linux 9 STIG v1r6Unix

IDENTIFICATION AND AUTHENTICATION

OL09-00-001115 - OL 9 must require a boot loader superuser password.DISA Oracle Linux 9 STIG v1r6Unix

ACCESS CONTROL

OL09-00-002041 - OL 9 must mount /dev/shm with the noexec option.DISA Oracle Linux 9 STIG v1r6Unix

CONFIGURATION MANAGEMENT

OL09-00-002052 - OL 9 must mount /tmp with the nosuid option.DISA Oracle Linux 9 STIG v1r6Unix

CONFIGURATION MANAGEMENT

OL09-00-002063 - OL 9 must mount /var/log with the nosuid option.DISA Oracle Linux 9 STIG v1r6Unix

CONFIGURATION MANAGEMENT

OL09-00-002068 - OL 9 must mount /var/tmp with the noexec option.DISA Oracle Linux 9 STIG v1r6Unix

CONFIGURATION MANAGEMENT

OL09-00-002070 - OL 9 must prevent device files from being interpreted on file systems that contain user home directories.DISA Oracle Linux 9 STIG v1r6Unix

CONFIGURATION MANAGEMENT

OL09-00-002071 - OL 9 must prevent files with the setuid and setgid bit set from being executed on file systems that contain user home directories.DISA Oracle Linux 9 STIG v1r6Unix

CONFIGURATION MANAGEMENT

OL09-00-002072 - OL 9 must prevent code from being executed on file systems that contain user home directories.DISA Oracle Linux 9 STIG v1r6Unix

CONFIGURATION MANAGEMENT

OL09-00-002080 - OL 9 must prevent special devices on nonroot local partitions.DISA Oracle Linux 9 STIG v1r6Unix

CONFIGURATION MANAGEMENT

OL09-00-002122 - OL 9 must prevent a user from overriding the banner-message-enable setting for the graphical user interface.DISA Oracle Linux 9 STIG v1r6Unix

ACCESS CONTROL

OL09-00-002123 - OL 9 must prevent a user from overriding the screensaver lock-enabled setting for the graphical user interface.DISA Oracle Linux 9 STIG v1r6Unix

ACCESS CONTROL

OL09-00-002125 - OL 9 must prevent a user from overriding the session lock-delay setting for the graphical user interface.DISA Oracle Linux 9 STIG v1r6Unix

ACCESS CONTROL

OL09-00-002301 - OL 9 must define default permissions for the bash shell.DISA Oracle Linux 9 STIG v1r6Unix

CONFIGURATION MANAGEMENT

OL09-00-002323 - OL 9 must securely compare internal information system clocks at least every 24 hours.DISA Oracle Linux 9 STIG v1r6Unix

AUDIT AND ACCOUNTABILITY