Revision 1.3

Apr 12, 2023
Functional Update
  • RHEL-08-010110 - RHEL 8 must encrypt all stored passwords with a FIPS 140-2 approved cryptographic hashing algorithm.
  • RHEL-08-010130 - The RHEL 8 shadow password suite must be configured to use a sufficient number of hashing rounds.
  • RHEL-08-010291 - The RHEL 8 operating system must implement DoD-approved encryption to protect the confidentiality of SSH server connections.
  • RHEL-08-010571 - RHEL 8 must prevent files with the setuid and setgid bit set from being executed on the /boot directory.
  • RHEL-08-010760 - All RHEL 8 local interactive user accounts must be assigned a home directory upon creation.
  • RHEL-08-020190 - RHEL 8 passwords for new users or password changes must have a 24 hours/1 day minimum password lifetime restriction in /etc/login.defs.
  • RHEL-08-020200 - RHEL 8 user account passwords must have a 60-day maximum password lifetime restriction.
  • RHEL-08-020231 - RHEL 8 passwords for new users must have a minimum of 15 characters.
  • RHEL-08-020310 - RHEL 8 must enforce a delay of at least four seconds between logon prompts following a failed logon attempt.
  • RHEL-08-020351 - RHEL 8 must define default permissions for all authenticated users in such a way that the user can only read and modify their own files.
Miscellaneous
  • Metadata updated.
  • Variables updated.