SR 7.6

7 rules found Severity: Medium

21 rules found Severity: High

22 rules found Severity: High

32 rules found Severity: Medium

27 rules found Severity: Medium

17 rules found Severity: High

27 rules found Severity: Medium

18 rules found Severity: Medium

27 rules found Severity: Medium

32 rules found Severity: Low

30 rules found Severity: Low

32 rules found Severity: Low

31 rules found Severity: Low

5 rules found Severity: Medium

5 rules found Severity: High

32 rules found Severity: Low

14 rules found Severity: High

11 rules found Severity: High

15 rules found Severity: High

7 rules found Severity: Medium

27 rules found Severity: Medium

13 rules found Severity: High

10 rules found Severity: High

10 rules found

12 rules found Severity: Medium

32 rules found Severity: Medium

31 rules found Severity: Medium

31 rules found

32 rules found Severity: Medium

17 rules found Severity: High

10 rules found Severity: High

36 rules found Severity: Medium

34 rules found Severity: Medium

33 rules found Severity: Medium

34 rules found Severity: Medium

29 rules found Severity: Medium

33 rules found Severity: Medium

34 rules found Severity: Medium

33 rules found Severity: Medium

34 rules found Severity: Medium

33 rules found Severity: Medium

34 rules found Severity: Medium

33 rules found Severity: Medium

23 rules found Severity: Medium

33 rules found Severity: Medium

32 rules found Severity: Medium

33 rules found Severity: Medium

25 rules found Severity: Medium

27 rules found Severity: Medium

28 rules found Severity: Medium

26 rules found Severity: Medium

27 rules found Severity: Medium

25 rules found Severity: Medium

27 rules found Severity: Medium

28 rules found Severity: Medium

26 rules found Severity: Medium

33 rules found Severity: Medium

34 rules found Severity: Medium

33 rules found Severity: Medium

22 rules found Severity: Low

26 rules found Severity: Medium

25 rules found Severity: Medium

26 rules found Severity: Medium

21 rules found Severity: Medium

30 rules found Severity: Medium

29 rules found Severity: Medium

30 rules found Severity: Medium

29 rules found Severity: Medium

22 rules found Severity: Medium

27 rules found Severity: Medium

24 rules found Severity: Medium

23 rules found Severity: Medium

26 rules found Severity: Medium

29 rules found Severity: Medium

28 rules found Severity: Medium

24 rules found

29 rules found Severity: Medium

28 rules found Severity: Medium

24 rules found

27 rules found Severity: Medium

28 rules found

29 rules found Severity: Medium

30 rules found Severity: Medium

24 rules found Severity: Medium

31 rules found Severity: Low

26 rules found Severity: Medium

32 rules found Severity: Low

25 rules found Severity: Medium

13 rules found Severity: Medium

16 rules found Severity: Medium

15 rules found Severity: Medium

30 rules found Severity: Medium

15 rules found Severity: Medium

35 rules found Severity: High

19 rules found Severity: Medium

25 rules found Severity: Medium

28 rules found Severity: Medium

23 rules found Severity: Medium

29 rules found Severity: Low

22 rules found Severity: Medium

13 rules found Severity: Medium

15 rules found Severity: Low

15 rules found Severity: Medium

31 rules found Severity: Medium

50 rules found Severity: Medium

16 rules found Severity: Medium

29 rules found Severity: High

29 rules found

14 rules found Severity: Medium

25 rules found Severity: Low

13 rules found Severity: Medium

12 rules found Severity: Medium

12 rules found

30 rules found Severity: High

16 rules found

34 rules found Severity: Medium

30 rules found Severity: High

31 rules found Severity: Medium

35 rules found Severity: High

31 rules found Severity: Medium

34 rules found Severity: Medium

31 rules found Severity: Medium

33 rules found Severity: Medium

35 rules found Severity: Medium

29 rules found Severity: High

19 rules found Severity: Medium

13 rules found Severity: Medium

5 rules found Severity: Medium

6 rules found

17 rules found Severity: Medium

13 rules found Severity: Medium

18 rules found Severity: Medium

15 rules found Severity: Medium

9 rules found

14 rules found Severity: Medium

15 rules found Severity: Medium

7 rules found

25 rules found Severity: Medium

21 rules found Severity: Low

18 rules found Severity: Low

17 rules found Severity: Low

18 rules found Severity: Low

17 rules found Severity: Low

12 rules found Severity: Low

20 rules found Severity: Medium

22 rules found Severity: Medium

18 rules found Severity: Medium

19 rules found Severity: Medium

20 rules found Severity: Medium

21 rules found Severity: Medium

22 rules found Severity: Medium

10 rules found

14 rules found Severity: Medium

18 rules found Severity: Medium

12 rules found

13 rules found Severity: Medium

19 rules found Severity: Medium

14 rules found Severity: Medium

20 rules found Severity: Medium

23 rules found Severity: Medium

5 rules found Severity: Low

5 rules found Severity: Medium

5 rules found Severity: Low

9 rules found Severity: Medium

12 rules found Severity: Medium

6 rules found Severity: Low

3 rules found Severity: Low

6 rules found Severity: Low

5 rules found Severity: Medium

5 rules found Severity: Low

3 rules found Severity: Low

5 rules found Severity: Low

18 rules found Severity: Medium

5 rules found Severity: Low

3 rules found Severity: Low

5 rules found Severity: Low

13 rules found Severity: Low

13 rules found Severity: Medium

5 rules found Severity: Low

7 rules found Severity: Low

5 rules found Severity: Low

3 rules found Severity: Low

5 rules found Severity: Low

6 rules found

5 rules found

18 rules found Severity: Medium

5 rules found Severity: Medium

19 rules found Severity: High

6 rules found Severity: Medium

6 rules found Severity: Low

16 rules found

5 rules found Severity: Medium

7 rules found

5 rules found

10 rules found Severity: Medium

8 rules found Severity: Medium

6 rules found Severity: Medium

14 rules found Severity: Low

16 rules found Severity: Medium

21 rules found Severity: Medium

13 rules found Severity: Medium

4 rules found Severity: Medium

19 rules found Severity: Low

12 rules found Severity: Medium

15 rules found Severity: High

8 rules found Severity: Medium

18 rules found Severity: High

11 rules found Severity: High

14 rules found Severity: High

10 rules found Severity: High

22 rules found Severity: High

14 rules found Severity: High

21 rules found Severity: High

6 rules found Severity: High

11 rules found Severity: Medium

13 rules found

5 rules found

11 rules found Severity: Low

9 rules found Severity: Medium

14 rules found Severity: Medium

12 rules found Severity: Medium

11 rules found Severity: High

21 rules found Severity: Medium

16 rules found Severity: Medium

10 rules found Severity: High

8 rules found Severity: High

13 rules found

1 rule found Severity: High

4 rules found Severity: High

1 rule found Severity: Medium

3 rules found Severity: High

2 rules found Severity: High

1 rule found Severity: Medium

2 rules found Severity: Medium

2 rules found Severity: Low

8 rules found Severity: Low

4 rules found Severity: Medium

Disable Prelinking

Verify File Hashes with RPM

Verify and Correct File Permissions with RPM

Install AIDE

Configure Periodic Execution of AIDE

Verify and Correct Ownership with RPM

Build and Test AIDE Database

Configure Notification of Post-AIDE Scan Details

Install the Host Intrusion Prevention System (HIPS) Module

Ensure /home Located On Separate Partition

Ensure /tmp Located On Separate Partition

Ensure /var Located On Separate Partition

Ensure /var/log Located On Separate Partition

Install the dracut-fips-aesni Package

Install the dracut-fips Package

Enable FIPS Mode in GRUB2

Ensure /var/log/audit Located On Separate Partition

Ensure gpgcheck Enabled In Main yum Configuration

Install Intrusion Detection Software

Ensure Red Hat GPG Key Installed

Install the Asset Configuration Compliance Module (ACCM)

Install the Policy Auditor (PA) Module

Ensure PAM Enforces Password Requirements - Authentication Retry Prompts Permitted Per-Session

Disable GDM Automatic Login

Disable GDM Guest Login

Disable All GNOME3 Thumbnailers

Require Encryption for Remote Access in GNOME3

Ensure the Logon Failure Delay is Set Correctly in login.defs

Ensure that Root's Path Does Not Include World or Group-Writable Directories

Ensure that Root's Path Does Not Include Relative Paths or Null Directories

Ensure the Default Umask is Set Correctly in login.defs

Ensure gpgcheck Enabled for Local Packages

Ensure gpgcheck Enabled for All yum Package Repositories

Ensure gpgcheck Enabled for Repository Metadata

Enable auditd Service

Record Events that Modify the System's Mandatory Access Controls

Record Events that Modify the System's Mandatory Access Controls in usr/share

Ensure auditd Collects Information on Exporting to Media (successful)

Record Events that Modify the System's Network Environment

Record Attempts to Alter Process and Session Initiation Information

Ensure auditd Collects System Administrator Actions

Record Events that Modify User/Group Information

Record Events that Modify the System's Discretionary Access Controls - chmod

Record Events that Modify the System's Discretionary Access Controls - chown

Record Events that Modify the System's Discretionary Access Controls - fchmod

Record Events that Modify the System's Discretionary Access Controls - fchmodat

Record Events that Modify the System's Discretionary Access Controls - fchown

Record Events that Modify the System's Discretionary Access Controls - fchownat

Record Events that Modify the System's Discretionary Access Controls - fremovexattr

Record Events that Modify the System's Discretionary Access Controls - fsetxattr

Record Events that Modify the System's Discretionary Access Controls - lchown

Record Events that Modify the System's Discretionary Access Controls - lremovexattr

Record Events that Modify the System's Discretionary Access Controls - lsetxattr

Record Events that Modify the System's Discretionary Access Controls - removexattr

Record Events that Modify the System's Discretionary Access Controls - setxattr

Ensure auditd Collects File Deletion Events by User

Ensure auditd Collects File Deletion Events by User - rename

Ensure auditd Collects File Deletion Events by User - renameat

Ensure auditd Collects File Deletion Events by User - rmdir

Ensure auditd Collects File Deletion Events by User - unlink

Ensure auditd Collects File Deletion Events by User - unlinkat

Ensure auditd Collects Unauthorized Access Attempts to Files (unsuccessful)

Record Unsuccessful Access Attempts to Files - creat

Record Unsuccessful Access Attempts to Files - ftruncate

Record Unsuccessful Access Attempts to Files - open

Record Unsuccessful Access Attempts to Files - open_by_handle_at

Record Unsuccessful Access Attempts to Files - openat

Record Unsuccessful Access Attempts to Files - truncate

Ensure auditd Collects Information on Kernel Module Loading and Unloading

Ensure auditd Collects Information on Kernel Module Unloading - delete_module

Ensure auditd Collects Information on Kernel Module Loading and Unloading - finit_module

Ensure auditd Collects Information on Kernel Module Loading - init_module

Ensure auditd Collects Information on the Use of Privileged Commands

Record attempts to alter time through adjtimex

Record Attempts to Alter Time Through clock_settime

Record attempts to alter time through settimeofday

Record Attempts to Alter Time Through stime

Record Attempts to Alter the localtime File

Enable Auditing for Processes Which Start Prior to the Audit Daemon