Item Search

NameAudit NamePluginCategory
OL08-00-010410 - OL 8 must accept Personal Identity Verification (PIV) credentials.DISA Oracle Linux 8 STIG v2r9Unix

IDENTIFICATION AND AUTHENTICATION

OL08-00-010421 - OL 8 must clear the page allocator to prevent use-after-free attacks.DISA Oracle Linux 8 STIG v2r9Unix

SYSTEM AND COMMUNICATIONS PROTECTION

OL08-00-010440 - YUM must remove all software components after updated versions have been installed on OL 8.DISA Oracle Linux 8 STIG v2r9Unix

SYSTEM AND INFORMATION INTEGRITY

OL08-00-010460 - There must be no "shosts.equiv" files on the OL 8 operating system.DISA Oracle Linux 8 STIG v2r9Unix

CONFIGURATION MANAGEMENT

OL08-00-010520 - The OL 8 SSH daemon must not allow authentication using known host's authentication.DISA Oracle Linux 8 STIG v2r9Unix

CONFIGURATION MANAGEMENT

OL08-00-010630 - OL 8 file systems must not execute binary files that are imported via Network File System (NFS).DISA Oracle Linux 8 STIG v2r9Unix

CONFIGURATION MANAGEMENT

OL08-00-010673 - OL 8 must disable core dumps for all users.DISA Oracle Linux 8 STIG v2r9Unix

CONFIGURATION MANAGEMENT

OL08-00-010674 - OL 8 must disable storing core dumps.DISA Oracle Linux 8 STIG v2r9Unix

CONFIGURATION MANAGEMENT

OL08-00-010675 - OL 8 must disable core dump backtraces.DISA Oracle Linux 8 STIG v2r9Unix

CONFIGURATION MANAGEMENT

OL08-00-010700 - All OL 8 world-writable directories must be owned by root, sys, bin, or an application user.DISA Oracle Linux 8 STIG v2r9Unix

CONFIGURATION MANAGEMENT

OL08-00-010720 - All OL 8 local interactive users must have a home directory assigned in the "/etc/passwd" file.DISA Oracle Linux 8 STIG v2r9Unix

CONFIGURATION MANAGEMENT

OL08-00-010731 - All OL 8 local interactive user home directory files must have mode "0750" or less permissive.DISA Oracle Linux 8 STIG v2r9Unix

CONFIGURATION MANAGEMENT

OL08-00-010770 - All OL 8 local initialization files must have mode "0740" or less permissive.DISA Oracle Linux 8 STIG v2r9Unix

CONFIGURATION MANAGEMENT

OL08-00-020026 - OL 8 must configure the use of the pam_faillock.so module in the /etc/pam.d/password-auth file.DISA Oracle Linux 8 STIG v2r9Unix

ACCESS CONTROL

OL08-00-020031 - OL 8 must initiate a session lock for graphical user interfaces when the screensaver is activated.DISA Oracle Linux 8 STIG v2r9Unix

ACCESS CONTROL

OL08-00-020080 - OL 8 must prevent a user from overriding the session lock-delay setting for the graphical user interface.DISA Oracle Linux 8 STIG v2r9Unix

ACCESS CONTROL

OL08-00-020101 - OL 8 must ensure the password complexity module is enabled in the system-auth file.DISA Oracle Linux 8 STIG v2r9Unix

CONFIGURATION MANAGEMENT

OL08-00-020150 - OL 8 must require the maximum number of repeating characters be limited to three when passwords are changed.DISA Oracle Linux 8 STIG v2r9Unix

IDENTIFICATION AND AUTHENTICATION

OL08-00-020160 - OL 8 must require the change of at least four character classes when passwords are changed.DISA Oracle Linux 8 STIG v2r9Unix

IDENTIFICATION AND AUTHENTICATION

OL08-00-020170 - OL 8 must require the change of at least eight characters when passwords are changed.DISA Oracle Linux 8 STIG v2r9Unix

IDENTIFICATION AND AUTHENTICATION

OL08-00-020180 - OL 8 passwords for new users or password changes must have a 24 hours/one day minimum password lifetime restriction in "/etc/shadow".DISA Oracle Linux 8 STIG v2r9Unix

IDENTIFICATION AND AUTHENTICATION

OL08-00-020210 - OL 8 user account passwords must be configured so that existing passwords are restricted to a 60-day maximum lifetime.DISA Oracle Linux 8 STIG v2r9Unix

IDENTIFICATION AND AUTHENTICATION

OL08-00-020230 - OL 8 passwords must have a minimum of 15 characters.DISA Oracle Linux 8 STIG v2r9Unix

IDENTIFICATION AND AUTHENTICATION

OL08-00-020240 - OL 8 duplicate User IDs (UIDs) must not exist for interactive users.DISA Oracle Linux 8 STIG v2r9Unix

AUDIT AND ACCOUNTABILITY, IDENTIFICATION AND AUTHENTICATION

OL08-00-020261 - The OL 8 password-auth file must disable access to the system for account identifiers (individuals, groups, roles, and devices) with 35 days of inactivity.DISA Oracle Linux 8 STIG v2r9Unix

IDENTIFICATION AND AUTHENTICATION

OL08-00-020264 - The OL 8 lastlog command must be group-owned by root.DISA Oracle Linux 8 STIG v2r9Unix

SYSTEM AND INFORMATION INTEGRITY

OL08-00-020320 - OL 8 must not have unnecessary accounts.DISA Oracle Linux 8 STIG v2r9Unix

CONFIGURATION MANAGEMENT

OL08-00-020350 - OL 8 must display the date and time of the last successful account logon upon an SSH logon.DISA Oracle Linux 8 STIG v2r9Unix

ACCESS CONTROL

OL08-00-020352 - OL 8 must set the umask value to 077 for all local interactive user accounts.DISA Oracle Linux 8 STIG v2r9Unix

CONFIGURATION MANAGEMENT

OL08-00-030063 - OL 8 must resolve audit information before writing to disk.DISA Oracle Linux 8 STIG v2r9Unix

CONFIGURATION MANAGEMENT

OL08-00-030100 - The OL 8 audit log directory must be owned by root to prevent unauthorized read access.DISA Oracle Linux 8 STIG v2r9Unix

AUDIT AND ACCOUNTABILITY

OL08-00-030121 - The OL 8 audit system must protect auditing rules from unauthorized change.DISA Oracle Linux 8 STIG v2r9Unix

AUDIT AND ACCOUNTABILITY

OL08-00-030150 - OL 8 must generate audit records for all account creation events that affect "/etc/passwd".DISA Oracle Linux 8 STIG v2r9Unix

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY, MAINTENANCE

OL08-00-030172 - OL 8 must generate audit records for all account creations, modifications, disabling, and termination events that affect "/etc/sudoers.d/".DISA Oracle Linux 8 STIG v2r9Unix

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY, MAINTENANCE

OL08-00-030180 - The OL 8 audit package must be installed.DISA Oracle Linux 8 STIG v2r9Unix

AUDIT AND ACCOUNTABILITY, CONFIGURATION MANAGEMENT, MAINTENANCE

OL08-00-030300 - OL 8 must generate audit records for any use of the "mount" command.DISA Oracle Linux 8 STIG v2r9Unix

AUDIT AND ACCOUNTABILITY, MAINTENANCE

OL08-00-030302 - OL 8 must generate audit records for any use of the "mount" syscall.DISA Oracle Linux 8 STIG v2r9Unix

AUDIT AND ACCOUNTABILITY, MAINTENANCE

OL08-00-030315 - OL 8 must generate audit records for any use of the "userhelper" command.DISA Oracle Linux 8 STIG v2r9Unix

AUDIT AND ACCOUNTABILITY

OL08-00-030360 - OL 8 must generate audit records for any use of the "init_module" and "finit_module" system calls.DISA Oracle Linux 8 STIG v2r9Unix

AUDIT AND ACCOUNTABILITY, MAINTENANCE

OL08-00-030390 - OL 8 must generate audit records for any use of the delete_module syscall.DISA Oracle Linux 8 STIG v2r9Unix

AUDIT AND ACCOUNTABILITY, MAINTENANCE

OL08-00-030570 - OL 8 must generate audit records for any use of the "chacl" command.DISA Oracle Linux 8 STIG v2r9Unix

AUDIT AND ACCOUNTABILITY, MAINTENANCE

OL08-00-030640 - OL 8 audit tools must be group-owned by root.DISA Oracle Linux 8 STIG v2r9Unix

AUDIT AND ACCOUNTABILITY

OL08-00-030660 - OL 8 must allocate audit record storage capacity to store at least one week of audit records when audit records are not immediately sent to a central audit record storage facility.DISA Oracle Linux 8 STIG v2r9Unix

AUDIT AND ACCOUNTABILITY

OL08-00-040004 - OL 8 must enable mitigations against processor-based vulnerabilities.DISA Oracle Linux 8 STIG v2r9Unix

CONFIGURATION MANAGEMENT

OL08-00-040024 - OL 8 must disable the transparent inter-process communication (TIPC) protocol.DISA Oracle Linux 8 STIG v2r9Unix

CONFIGURATION MANAGEMENT

OL08-00-040025 - OL 8 must disable mounting of cramfs.DISA Oracle Linux 8 STIG v2r9Unix

CONFIGURATION MANAGEMENT

OL08-00-040030 - OL 8 must be configured to prohibit or restrict the use of functions, ports, protocols, and/or services as defined in the Ports, Protocols, and Services Management (PPSM) Category Assignments List (CAL) and vulnerability assessments.DISA Oracle Linux 8 STIG v2r9Unix

CONFIGURATION MANAGEMENT

OL08-00-040120 - OL 8 must mount "/dev/shm" with the "nodev" option.DISA Oracle Linux 8 STIG v2r9Unix

CONFIGURATION MANAGEMENT

OL08-00-040121 - OL 8 must mount "/dev/shm" with the "nosuid" option.DISA Oracle Linux 8 STIG v2r9Unix

CONFIGURATION MANAGEMENT

OL08-00-040131 - OL 8 must mount "/var/log/audit" with the "noexec" option.DISA Oracle Linux 8 STIG v2r9Unix

CONFIGURATION MANAGEMENT