DISA_STIG_Oracle_Linux_7_v2r4.audit from DISA Oracle Linux 7 v2r4 STIG

OL07-00-010010 - The Oracle Linux operating system must be configured so that the file permissions, ownership, and group membership of system files and commands match the vendor values.

800-53|SI-7(1)

CAT|I

CCI|CCI-001494

CCI|CCI-001496

Rule-ID|SV-221652r646955_rule

STIG-ID|OL07-00-010010

STIG-Legacy|SV-108149

STIG-Legacy|V-99045

Vuln-ID|V-221652

OL07-00-010020 - The Oracle Linux operating system must be configured so that the cryptographic hash of system files and commands matches vendor values.

CCI|CCI-001749

Rule-ID|SV-221653r603260_rule

STIG-ID|OL07-00-010020

STIG-Legacy|SV-108151

STIG-Legacy|V-99047

Vuln-ID|V-221653

OL07-00-010030 - The Oracle Linux operating system must display the Standard Mandatory DoD Notice and Consent Banner before granting local or remote access to the system via a graphical user logon.

800-53|AC-8

CAT|II

CCI|CCI-000048

CCI|CCI-000050

CCI|CCI-001384

CCI|CCI-001385

CCI|CCI-001386

CCI|CCI-001387

CCI|CCI-001388

Rule-ID|SV-221654r603260_rule

STIG-ID|OL07-00-010030

STIG-Legacy|SV-108153

STIG-Legacy|V-99049

Vuln-ID|V-221654

OL07-00-010040 - The Oracle Linux operating system must display the approved Standard Mandatory DoD Notice and Consent Banner before granting local or remote access to the system via a graphical user logon.

Rule-ID|SV-221655r603260_rule

STIG-ID|OL07-00-010040

STIG-Legacy|SV-108155

STIG-Legacy|V-99051

Vuln-ID|V-221655

OL07-00-010050 - The Oracle Linux operating system must display the Standard Mandatory DoD Notice and Consent Banner before granting local or remote access to the system via a command line user logon.

Rule-ID|SV-221656r603260_rule

STIG-ID|OL07-00-010050

STIG-Legacy|SV-108157

STIG-Legacy|V-99053

Vuln-ID|V-221656

OL07-00-010060 - The Oracle Linux operating system must enable a user session lock until that user re-establishes access using established identification and authentication procedures.

800-53|AC-11

CCI|CCI-000056

CCI|CCI-000058

Rule-ID|SV-221657r603260_rule

STIG-ID|OL07-00-010060

STIG-Legacy|SV-108159

STIG-Legacy|V-99055

Vuln-ID|V-221657

OL07-00-010061 - The Oracle Linux operating system must uniquely identify and must authenticate users using multifactor authentication via a graphical user logon.

800-53|IA-5(11)

CCI|CCI-001948

Rule-ID|SV-221658r603260_rule

STIG-ID|OL07-00-010061

STIG-Legacy|SV-108161

STIG-Legacy|V-99057

Vuln-ID|V-221658

OL07-00-010062 - The Oracle Linux operating system must prevent a user from overriding the screensaver lock-enabled setting for the graphical user interface.

CCI|CCI-000057

Rule-ID|SV-221659r603260_rule

STIG-ID|OL07-00-010062

STIG-Legacy|SV-108163

STIG-Legacy|V-99059

Vuln-ID|V-221659

OL07-00-010070 - The Oracle Linux operating system must initiate a screensaver after a 15-minute period of inactivity for graphical user interfaces.

Rule-ID|SV-221660r603260_rule

STIG-ID|OL07-00-010070

STIG-Legacy|SV-108165

STIG-Legacy|V-99061

Vuln-ID|V-221660

OL07-00-010081 - The Oracle Linux operating system must prevent a user from overriding the screensaver lock-delay setting for the graphical user interface.

Rule-ID|SV-221661r603260_rule

STIG-ID|OL07-00-010081

STIG-Legacy|SV-108167

STIG-Legacy|V-99063

Vuln-ID|V-221661

OL07-00-010082 - The Oracle Linux operating system must prevent a user from overriding the session idle-delay setting for the graphical user interface.

Rule-ID|SV-221662r603260_rule

STIG-ID|OL07-00-010082

STIG-Legacy|SV-108169

STIG-Legacy|V-99065

Vuln-ID|V-221662

OL07-00-010100 - The Oracle Linux operating system must initiate a session lock for the screensaver after a period of inactivity for graphical user interfaces.

Rule-ID|SV-221664r603260_rule

STIG-ID|OL07-00-010100

STIG-Legacy|SV-108173

STIG-Legacy|V-99069

Vuln-ID|V-221664

OL07-00-010101 - The Oracle Linux operating system must prevent a user from overriding the screensaver idle-activation-enabled setting for the graphical user interface.

Rule-ID|SV-221665r603260_rule

STIG-ID|OL07-00-010101

STIG-Legacy|SV-108175

STIG-Legacy|V-99071

Vuln-ID|V-221665

OL07-00-010110 - The Oracle Linux operating system must initiate a session lock for graphical user interfaces when the screensaver is activated.

Rule-ID|SV-221666r603260_rule

STIG-ID|OL07-00-010110

STIG-Legacy|SV-108177

STIG-Legacy|V-99073

Vuln-ID|V-221666

OL07-00-010118 - The Oracle Linux operating system must be configured so that /etc/pam.d/passwd implements /etc/pam.d/system-auth when changing passwords.

800-53|IA-5

CCI|CCI-000192

Rule-ID|SV-221667r603260_rule

STIG-ID|OL07-00-010118

STIG-Legacy|SV-108179

STIG-Legacy|V-99075

Vuln-ID|V-221667

OL07-00-010119 - The Oracle Linux operating system must be configured so that when passwords are changed or new passwords are established, pwquality must be used.

800-53|AC-7

CSCv6|16.7

Rule-ID|SV-221668r603260_rule

STIG-ID|OL07-00-010119

STIG-Legacy|SV-108181

STIG-Legacy|V-99077

Vuln-ID|V-221668

OL07-00-010120 - The Oracle Linux operating system must be configured so that when passwords are changed or new passwords are established, the new password must contain at least one upper-case character.

800-53|IA-5(1)

Rule-ID|SV-221669r603260_rule

STIG-ID|OL07-00-010120

STIG-Legacy|SV-108183

STIG-Legacy|V-99079

Vuln-ID|V-221669

OL07-00-010130 - The Oracle Linux operating system must be configured so that when passwords are changed or new passwords are established, the new password must contain at least one lower-case character.

CCI|CCI-000193

Rule-ID|SV-221670r603260_rule

STIG-ID|OL07-00-010130

STIG-Legacy|SV-108185

STIG-Legacy|V-99081

Vuln-ID|V-221670

OL07-00-010140 - The Oracle Linux operating system must be configured so that when passwords are changed or new passwords are assigned, the new password must contain at least one numeric character.

CCI|CCI-000194

Rule-ID|SV-221671r603260_rule

STIG-ID|OL07-00-010140

STIG-Legacy|SV-108187

STIG-Legacy|V-99083

Vuln-ID|V-221671

OL07-00-010150 - The Oracle Linux operating system must be configured so that when passwords are changed or new passwords are established, the new password must contain at least one special character.

CCI|CCI-001619

Rule-ID|SV-221672r603260_rule

STIG-ID|OL07-00-010150

STIG-Legacy|SV-108189

STIG-Legacy|V-99085

Vuln-ID|V-221672

OL07-00-010160 - The Oracle Linux operating system must be configured so that when passwords are changed a minimum of eight of the total number of characters must be changed.

CCI|CCI-000195

Rule-ID|SV-221673r603260_rule

STIG-ID|OL07-00-010160

STIG-Legacy|SV-108191

STIG-Legacy|V-99087

Vuln-ID|V-221673

OL07-00-010170 - The Oracle Linux operating system must be configured so that when passwords are changed a minimum of four character classes must be changed.

Rule-ID|SV-221674r603260_rule

STIG-ID|OL07-00-010170

STIG-Legacy|SV-108193

STIG-Legacy|V-99089

Vuln-ID|V-221674

OL07-00-010180 - The Oracle Linux operating system must be configured so that when passwords are changed the number of repeating consecutive characters must not be more than three characters.

Rule-ID|SV-221675r603260_rule

STIG-ID|OL07-00-010180

STIG-Legacy|SV-108195

STIG-Legacy|V-99091

Vuln-ID|V-221675

OL07-00-010190 - The Oracle Linux operating system must be configured so that when passwords are changed the number of repeating characters of the same character class must not be more than four characters.

Rule-ID|SV-221676r603260_rule

STIG-ID|OL07-00-010190

STIG-Legacy|SV-108197

STIG-Legacy|V-99093

Vuln-ID|V-221676

OL07-00-010200 - The Oracle Linux operating system must be configured so that the PAM system service is configured to store only encrypted representations of passwords.

CCI|CCI-000196

Rule-ID|SV-221677r603260_rule

STIG-ID|OL07-00-010200

STIG-Legacy|SV-108199

STIG-Legacy|V-99095

Vuln-ID|V-221677

OL07-00-010210 - The Oracle Linux operating system must be configured to use the shadow file to store only encrypted representations of passwords.

800-53|SC-13

Rule-ID|SV-221678r603260_rule

STIG-ID|OL07-00-010210

STIG-Legacy|SV-108201

STIG-Legacy|V-99097

Vuln-ID|V-221678

OL07-00-010220 - The Oracle Linux operating system must be configured so that user and group account administration utilities are configured to store only encrypted representations of passwords.

Rule-ID|SV-221680r603260_rule

STIG-ID|OL07-00-010220

STIG-Legacy|SV-108203

STIG-Legacy|V-99099

Vuln-ID|V-221680

OL07-00-010230 - The Oracle Linux operating system must be configured so that passwords for new users are restricted to a 24 hours/1 day minimum lifetime.

CCI|CCI-000198

Rule-ID|SV-221681r603260_rule

STIG-ID|OL07-00-010230

STIG-Legacy|SV-108205

STIG-Legacy|V-99101

Vuln-ID|V-221681

Detections

Analytics

DISA Oracle Linux 7 STIG v2r4

Warning! Audit Deprecated

Audit Details

Audit Changelog

Revision 1.2

Miscellaneous

Revision 1.1

Functional Update


Revision 1.2 Jan 11, 2022 Miscellaneous Audit deprecated. Metadata updated. References updated.
Revision 1.1 Sep 28, 2021 Functional Update OL07-00-030340 - The Oracle Linux operating system must immediately notify the System Administrator (SA) and Information System Security Officer (ISSO) (at a minimum) via email when the threshold for the repository maximum audit record storage capacity is reached - at a minimum via email when the threshold for the repository maximum audit record storage capacity is reached.