DISA Oracle Linux 7 STIG v2r14

Audit Details

Name: DISA Oracle Linux 7 STIG v2r14

Updated: 10/15/2024

Authority: DISA STIG

Plugin: Unix

Revision: 1.3

Estimated Item Count: 257

File Details

Filename: DISA_STIG_Oracle_Linux_7_v2r14.audit

Size: 685 kB

MD5: d8ae139b602c1bec2acc1dc7027b59d0
SHA256: 07543afbde8242a3bde33dcdbaeedb5695e7e0cca4a727fb054b5a49044e14d2

Audit Changelog

 
Revision 1.3

Oct 15, 2024

Functional Update
  • OL07-00-020730 - The Oracle Linux operating system must be configured so that local initialization files do not execute world-writable programs.
  • OL07-00-021030 - The Oracle Linux operating system must be configured so that all world-writable directories are group-owned by root, sys, bin, or an application group.
  • OL07-00-021031 - The Oracle Linux operating system must be configured so that all world-writable directories are owned by root, sys, bin, or an application user.
  • OL07-00-021700 - The Oracle Linux operating system must not allow removable media to be used as the boot loader unless approved.
  • OL07-00-040540 - The Oracle Linux operating system must not contain .shosts files.
  • OL07-00-040550 - The Oracle Linux operating system must not contain shosts.equiv files.
Miscellaneous
  • References updated.
Removed
  • OL07-00-021700 - The Oracle Linux operating system must not allow removable media to be used as the boot loader unless approved - /usr/bin/find.
Revision 1.2

Aug 7, 2024

Functional Update
  • OL07-00-030330 - The Oracle Linux operating system must initiate an action to notify the System Administrator (SA) and Information System Security Officer (ISSO), at a minimum, when allocated audit record storage volume reaches 75 percent of the repository maximum audit record storage capacity - SA and Information System Security Officer ISSO, at a minimum, when allocated audit record storage volume reaches 75% of the repository maximum audit record storage capacity.
Miscellaneous
  • References updated.
Revision 1.1

Jun 14, 2024

Functional Update
  • OL07-00-010010 - The Oracle Linux operating system must be configured so that the file permissions, ownership, and group membership of system files and commands match the vendor values.
  • OL07-00-010020 - The Oracle Linux operating system must be configured so that the cryptographic hash of system files and commands matches vendor values.
Miscellaneous
  • Variables updated.