DISA_STIG_Red_Hat_Enterprise_Linux_8_v1r1.audit from DISA Red Hat Enterprise Linux 8 v1r1 STIG

RHEL-08-010000 - RHEL 8 must be a vendor-supported release.

CAT|I

CCI|CCI-000366

Rule-ID|SV-230221r599732_rule

STIG-ID|RHEL-08-010000

Vuln-ID|V-230221

RHEL-08-010010 - RHEL 8 vendor packaged system security patches and updates must be installed and up to date.

CAT|II

Rule-ID|SV-230222r599732_rule

STIG-ID|RHEL-08-010010

Vuln-ID|V-230222

RHEL-08-010020 - RHEL 8 must implement NIST FIPS-validated cryptography for the following: to provision digital signatures, to generate cryptographic hashes, and to protect data requiring data-at-rest protections in accordance with applicable federal laws, Executive Orders, directives, policies, regulations, and standards.

CCI|CCI-000068

Rule-ID|SV-230223r599732_rule

STIG-ID|RHEL-08-010020

Vuln-ID|V-230223

RHEL-08-010030 - All RHEL 8 local disk partitions must implement cryptographic mechanisms to prevent unauthorized disclosure or modification of all information that requires at rest protection.

CCI|CCI-001199

Rule-ID|SV-230224r599732_rule

STIG-ID|RHEL-08-010030

Vuln-ID|V-230224

RHEL-08-010040 - RHEL 8 must display the Standard Mandatory DoD Notice and Consent Banner before granting local or remote access to the system via a ssh logon. -  /etc/issue

CCI|CCI-000048

Rule-ID|SV-230225r599732_rule

STIG-ID|RHEL-08-010040

Vuln-ID|V-230225

RHEL-08-010040 - RHEL 8 must display the Standard Mandatory DoD Notice and Consent Banner before granting local or remote access to the system via a ssh logon. -  /etc/ssh/sshd_config

RHEL-08-010050 - RHEL 8 must display the Standard Mandatory DoD Notice and Consent Banner before granting local or remote access to the system via a graphical user logon. - banner-message-enable

Rule-ID|SV-230226r599732_rule

STIG-ID|RHEL-08-010050

Vuln-ID|V-230226

RHEL-08-010050 - RHEL 8 must display the Standard Mandatory DoD Notice and Consent Banner before granting local or remote access to the system via a graphical user logon. - banner-message-text

RHEL-08-010060 - RHEL 8 must display the Standard Mandatory DoD Notice and Consent Banner before granting local or remote access to the system via a command line user logon.

Rule-ID|SV-230227r599732_rule

STIG-ID|RHEL-08-010060

Vuln-ID|V-230227

RHEL-08-010070 - All RHEL 8 remote access methods must be monitored. - auth

CCI|CCI-000067

Rule-ID|SV-230228r599732_rule

STIG-ID|RHEL-08-010070

Vuln-ID|V-230228

RHEL-08-010070 - All RHEL 8 remote access methods must be monitored. - authpriv

RHEL-08-010070 - All RHEL 8 remote access methods must be monitored. - daemon

RHEL-08-010090 - RHEL 8, for PKI-based authentication, must validate certificates by constructing a certification path (which includes status information) to an accepted trust anchor.

CCI|CCI-000185

Rule-ID|SV-230229r599732_rule

STIG-ID|RHEL-08-010090

Vuln-ID|V-230229

RHEL-08-010100 - RHEL 8, for certificate-based authentication, must enforce authorized access to the corresponding private key.

CCI|CCI-000186

Rule-ID|SV-230230r599732_rule

STIG-ID|RHEL-08-010100

Vuln-ID|V-230230

RHEL-08-010110 - RHEL 8 must encrypt all stored passwords with a FIPS 140-2 approved cryptographic hashing algorithm.

CCI|CCI-000196

Rule-ID|SV-230231r599732_rule

STIG-ID|RHEL-08-010110

Vuln-ID|V-230231

RHEL-08-010120 - RHEL 8 must employ FIPS 140-2 approved cryptographic hashing algorithms for all stored passwords.

Rule-ID|SV-230232r599732_rule

STIG-ID|RHEL-08-010120

Vuln-ID|V-230232

RHEL-08-010130 - RHEL 8 must employ FIPS 140-2 approved cryptographic hashing algorithms for all created passwords. - password-auth

Rule-ID|SV-230233r599732_rule

STIG-ID|RHEL-08-010130

Vuln-ID|V-230233

RHEL-08-010130 - RHEL 8 must employ FIPS 140-2 approved cryptographic hashing algorithms for all created passwords. - system-auth

RHEL-08-010140 - RHEL 8 operating systems booted with United Extensible Firmware Interface (UEFI) implemented must require authentication upon booting into single-user mode and maintenance. - password

CCI|CCI-000213

Rule-ID|SV-230234r599732_rule

STIG-ID|RHEL-08-010140

Vuln-ID|V-230234

RHEL-08-010140 - RHEL 8 operating systems booted with United Extensible Firmware Interface (UEFI) implemented must require authentication upon booting into single-user mode and maintenance. - superusers

RHEL-08-010150 - RHEL 8 operating systems booted with a BIOS must require authentication upon booting into single-user and maintenance modes. - password

Rule-ID|SV-230235r599732_rule

STIG-ID|RHEL-08-010150

Vuln-ID|V-230235

RHEL-08-010150 - RHEL 8 operating systems booted with a BIOS must require authentication upon booting into single-user and maintenance modes. - superusers

RHEL-08-010151 - RHEL 8 operating systems must require authentication upon booting into emergency or rescue modes.

Rule-ID|SV-230236r599732_rule

STIG-ID|RHEL-08-010151

Vuln-ID|V-230236

RHEL-08-010160 - The RHEL 8 pam_unix.so module must use a FIPS 140-2 approved cryptographic hashing algorithm for system authentication. - password-auth

CCI|CCI-000803

Rule-ID|SV-230237r599732_rule

STIG-ID|RHEL-08-010160

Vuln-ID|V-230237

RHEL-08-010160 - The RHEL 8 pam_unix.so module must use a FIPS 140-2 approved cryptographic hashing algorithm for system authentication. - system-auth

RHEL-08-010161 - RHEL 8 must prevent system daemons from using Kerberos for authentication.

Rule-ID|SV-230238r599732_rule

STIG-ID|RHEL-08-010161

Vuln-ID|V-230238

RHEL-08-010162 - The krb5-workstation package must not be installed on RHEL 8.

Rule-ID|SV-230239r599732_rule

STIG-ID|RHEL-08-010162

Vuln-ID|V-230239

RHEL-08-010170 - RHEL 8 must use a Linux Security Module configured to enforce limits on system services.

CCI|CCI-001084

Rule-ID|SV-230240r599732_rule

STIG-ID|RHEL-08-010170

Vuln-ID|V-230240

RHEL-08-010171 - RHEL 8 must have policycoreutils package installed.

CAT|III

Rule-ID|SV-230241r599732_rule

STIG-ID|RHEL-08-010171

Vuln-ID|V-230241

RHEL-08-010180 - All RHEL 8 public directories must be owned by root or a system account to prevent unauthorized and unintended information transferred via shared system resources.

CCI|CCI-001090

Rule-ID|SV-230242r599732_rule

STIG-ID|RHEL-08-010180

Vuln-ID|V-230242

RHEL-08-010190 - A sticky bit must be set on all RHEL 8 public directories to prevent unauthorized and unintended information transferred via shared system resources.

Rule-ID|SV-230243r599732_rule

STIG-ID|RHEL-08-010190

Vuln-ID|V-230243

RHEL-08-010200 - RHEL 8 must be configured so that all network connections associated with SSH traffic are terminated at the end of the session or after 10 minutes of inactivity, except to fulfill documented and validated mission requirements - ClientAliveCountMax

CCI|CCI-001133

Rule-ID|SV-230244r599732_rule

STIG-ID|RHEL-08-010200

Vuln-ID|V-230244

RHEL-08-010200 - RHEL 8 must be configured so that all network connections associated with SSH traffic are terminated at the end of the session or after 10 minutes of inactivity, except to fulfill documented and validated mission requirements - ClientAliveInterval

RHEL-08-010210 - The RHEL 8 /var/log/messages file must have mode 0640 or less permissive.

CCI|CCI-001314

Rule-ID|SV-230245r599732_rule

STIG-ID|RHEL-08-010210

Vuln-ID|V-230245

RHEL-08-010220 - The RHEL 8 /var/log/messages file must be owned by root.

Rule-ID|SV-230246r599732_rule

STIG-ID|RHEL-08-010220

Vuln-ID|V-230246

RHEL-08-010230 - The RHEL 8 /var/log/messages file must be group-owned by root.

Rule-ID|SV-230247r599732_rule

STIG-ID|RHEL-08-010230

Vuln-ID|V-230247

RHEL-08-010240 - The RHEL 8 /var/log directory must have mode 0755 or less permissive.

Rule-ID|SV-230248r599732_rule

STIG-ID|RHEL-08-010240

Vuln-ID|V-230248

RHEL-08-010250 - The RHEL 8 /var/log directory must be owned by root.

Rule-ID|SV-230249r599732_rule

STIG-ID|RHEL-08-010250

Vuln-ID|V-230249

RHEL-08-010260 - The RHEL 8 /var/log directory must be group-owned by root.

Rule-ID|SV-230250r599732_rule

STIG-ID|RHEL-08-010260

Vuln-ID|V-230250

RHEL-08-010290 - The RHEL 8 SSH daemon must be configured to use only Message Authentication Codes (MACs) employing FIPS 140-2 validated cryptographic hash algorithms. - CRYPTO_POLICY

CCI|CCI-001453

Rule-ID|SV-230251r599732_rule

STIG-ID|RHEL-08-010290

Vuln-ID|V-230251

RHEL-08-010290 - The RHEL 8 SSH daemon must be configured to use only Message Authentication Codes (MACs) employing FIPS 140-2 validated cryptographic hash algorithms. - MACs

RHEL-08-010290 - The RHEL 8 SSH daemon must be configured to use only Message Authentication Codes (MACs) employing FIPS 140-2 validated cryptographic hash algorithms. - update-crypto-policies

RHEL-08-010291 - The RHEL 8 operating system must implement DoD-approved encryption to protect the confidentiality of SSH connections. - ciphers

Rule-ID|SV-230252r599778_rule

STIG-ID|RHEL-08-010291

Vuln-ID|V-230252

RHEL-08-010291 - The RHEL 8 operating system must implement DoD-approved encryption to protect the confidentiality of SSH connections. - CRYPTO_POLICY

RHEL-08-010291 - The RHEL 8 operating system must implement DoD-approved encryption to protect the confidentiality of SSH connections. - update-crypto-policies

RHEL-08-010292 - RHEL 8 must ensure the SSH server uses strong entropy.

Rule-ID|SV-230253r599732_rule

STIG-ID|RHEL-08-010292

Vuln-ID|V-230253

RHEL-08-010293 - The RHEL 8 operating system must implement DoD-approved encryption in the OpenSSL package. - /etc/pki/tls/openssl.cnf

Rule-ID|SV-230254r599732_rule

STIG-ID|RHEL-08-010293

Vuln-ID|V-230254

RHEL-08-010293 - The RHEL 8 operating system must implement DoD-approved encryption in the OpenSSL package. - update-crypto-policies

RHEL-08-010294 - The RHEL 8 operating system must implement DoD-approved TLS encryption in the OpenSSL package.

Rule-ID|SV-230255r599732_rule

STIG-ID|RHEL-08-010294

Vuln-ID|V-230255

RHEL-08-010295 - The RHEL 8 operating system must implement DoD-approved TLS encryption in the GnuTLS package.

Rule-ID|SV-230256r599732_rule

STIG-ID|RHEL-08-010295

Vuln-ID|V-230256

RHEL-08-010300 - RHEL 8 system commands must have mode 0755 or less permissive.

CCI|CCI-001499

Rule-ID|SV-230257r599732_rule

STIG-ID|RHEL-08-010300

Vuln-ID|V-230257

RHEL-08-010310 - RHEL 8 system commands must be owned by root.

Rule-ID|SV-230258r599732_rule

STIG-ID|RHEL-08-010310

Vuln-ID|V-230258

RHEL-08-010320 - RHEL 8 system commands must be group-owned by root or a system account.

Rule-ID|SV-230259r599732_rule

STIG-ID|RHEL-08-010320

Vuln-ID|V-230259

RHEL-08-010330 - RHEL 8 library files must have mode 0755 or less permissive.

Rule-ID|SV-230260r599732_rule

STIG-ID|RHEL-08-010330

Vuln-ID|V-230260

RHEL-08-010340 - RHEL 8 library files must be owned by root.

Rule-ID|SV-230261r599732_rule

STIG-ID|RHEL-08-010340

Vuln-ID|V-230261

RHEL-08-010350 - RHEL 8 library files must be group-owned by root or a system account.

Detections

Analytics

Revision 1.3

Jul 12, 2021

Functional Update

Miscellaneous