CIS Red Hat Enterprise Linux 7 STIG v2.0.0 STIG

Audit Details

Name: CIS Red Hat Enterprise Linux 7 STIG v2.0.0 STIG

Updated: 11/6/2024

Authority: CIS

Plugin: Unix

Revision: 1.19

Estimated Item Count: 354

File Details

Filename: CIS_Red_Hat_EL7_STIG_v2.0.0_STIG.audit

Size: 1.16 MB

MD5: 7a890dbd13f81f7d273c27e9fedcd2ef
SHA256: 74a7268c3b646df7dbc364c9cdc43ac9be67b892b3f260db941719b31afe98ce

Audit Changelog

 
Revision 1.19

Nov 6, 2024

Functional Update
  • 6.1.10 Ensure no world writable files exist
  • 6.1.11 Ensure no unowned files or directories exist
  • 6.1.12 Ensure no ungrouped files or directories exist
Revision 1.18

Oct 15, 2024

Functional Update
  • 1.1.26 Ensure all world-writable directories are group-owned.
  • 1.4.4 Ensure boot loader does not allow removable media
  • 5.3.36 Ensure no '.shosts' files exist on the system - .shosts files exist on the system
  • 5.3.37 Ensure no 'shosts.equiv' files exist on the system - shosts.equiv files exist on the system
  • 6.1.10 Ensure no world writable files exist
  • 6.1.16 Ensure all world-writable directories are owned by root, sys, bin, or an application User Identifier
Informational Update
  • 1.4.4 Ensure boot loader does not allow removable media
  • 6.1.16 Ensure all world-writable directories are owned by root, sys, bin, or an application User Identifier
Miscellaneous
  • References updated.
Revision 1.17

Aug 7, 2024

Functional Update
  • 4.1.2.4 Ensure system notification is sent out when volume is 75% full - SA and Information System Security Officer ISSO, at a minimum, when allocated audit record storage volume reaches 75% of the repository maximum audit record storage capacity.
Miscellaneous
  • References updated.
Revision 1.16

Jun 17, 2024

Miscellaneous
  • Metadata updated.
Revision 1.15

Jun 14, 2024

Functional Update
  • 6.1.1 Audit system file permissions
  • 6.1.15 Ensure the file permissions ownership and group membership of system files and commands match the vendor values
Miscellaneous
  • Metadata updated.
Revision 1.14

Oct 3, 2023

Functional Update
  • 1.11 Ensure anti-virus is installed and running
Revision 1.13

Sep 19, 2023

Functional Update
  • 1.1.26 Ensure all world-writable directories are group-owned.
  • 1.4.4 Ensure boot loader does not allow removable media
  • 1.6.1.10 Ensure system device files are labeled - device_t
  • 1.6.1.10 Ensure system device files are labeled - unlabeled_t
  • 5.3.36 Ensure no '.shosts' files exist on the system - .shosts files exist on the system
  • 5.3.37 Ensure no 'shosts.equiv' files exist on the system - shosts.equiv files exist on the system
  • 6.1.10 Ensure no world writable files exist
  • 6.1.11 Ensure no unowned files or directories exist
  • 6.1.12 Ensure no ungrouped files or directories exist
  • 6.1.16 Ensure all world-writable directories are owned by root, sys, bin, or an application User Identifier
  • 6.2.20 Ensure that all files and directories contained in local interactive user home directories are owned by the user
  • 6.2.21 Ensure local interactive user is a member of the group owner.
  • 6.2.22 Ensure users' files and directories within the home directory permissions are 750 or more restrictive
Miscellaneous
  • Metadata updated.
  • References updated.
  • Variables updated.
Revision 1.12

Jul 20, 2023

Functional Update
  • 6.2.12 Ensure users own their home directories
Revision 1.11

May 19, 2023

Functional Update
  • 1.8.18 Ensure graphical user interface automounter is disabled - automount
  • 1.8.18 Ensure graphical user interface automounter is disabled - automount-open
  • 1.8.18 Ensure graphical user interface automounter is disabled - automount=false
  • 1.8.18 Ensure graphical user interface automounter is disabled - autorun-never
  • 1.8.18 Ensure graphical user interface automounter is disabled - autorun-never=true
Revision 1.10

Apr 12, 2023

Functional Update
  • 5.4.1 Ensure password creation requirements are configured - dcredit
  • 5.4.1 Ensure password creation requirements are configured - lcredit
  • 5.4.1 Ensure password creation requirements are configured - ocredit
  • 5.4.1 Ensure password creation requirements are configured - ucredit
  • 5.4.7 Ensure minimum and maximum requirements are set for password changes - difok
  • 5.4.7 Ensure minimum and maximum requirements are set for password changes - maxclassrepeat
  • 5.4.7 Ensure minimum and maximum requirements are set for password changes - maxrepeat
  • 5.4.7 Ensure minimum and maximum requirements are set for password changes - minclass
  • 5.4.7 Ensure minimum and maximum requirements are set for password changes - minlen
  • 5.5.1.10 Ensure delay between logon prompts on failure
  • 5.5.1.2 Ensure minimum days between password changes is configured - login.defs
  • 5.5.1.6 Ensure shadow file is configured to use only encrypted representations of passwords
  • 5.5.1.7 Ensure password expiration is 60 Day maximum for new users
  • 5.5.10 Ensure upon user creation a home directory is assigned.
  • 5.5.8 Ensure Default user umask is 077
Miscellaneous
  • Metadata updated.
  • Platform check updated.
  • Variables updated.