Skip to content
ATO Pathways
  Log In

Guide to the Secure Configuration of Red Hat Enterprise Linux 9

Rules, Groups, and Values defined within the XCCDF Benchmark

  • Disable the virt_use_nfs SELinux Boolean

    By default, the SELinux boolean <code>virt_use_nfs</code> is disabled. If this setting is enabled, it should be disabled. To disable the <code>vir...
    Rule Medium Severity
    Show

  • Disable the virt_use_rawip SELinux Boolean

    By default, the SELinux boolean <code>virt_use_rawip</code> is disabled. If this setting is enabled, it should be disabled. To disable the <code>v...
    Rule Medium Severity
    Show

  • Disable the CUPS Service

    The cups service can be disabled with the following command: 
    $ sudo systemctl mask --now cups.service
    Rule Unknown Severity
    Show

  • Disable the virt_use_samba SELinux Boolean

    By default, the SELinux boolean <code>virt_use_samba</code> is disabled. If this setting is enabled, it should be disabled. To disable the <code>v...
    Rule Medium Severity
    Show

  • Disable the virt_use_sanlock SELinux Boolean

    By default, the SELinux boolean <code>virt_use_sanlock</code> is disabled. If this setting is enabled, it should be disabled. To disable the <code...
    Rule Medium Severity
    Show

  • Disable the virt_use_usb SELinux Boolean

    By default, the SELinux boolean <code>virt_use_usb</code> is enabled. This setting should be disabled. To disable the <code>virt_use_usb</code> SE...
    Rule Medium Severity
    Show

  • Disable the virt_use_xserver SELinux Boolean

    By default, the SELinux boolean <code>virt_use_xserver</code> is disabled. If this setting is enabled, it should be disabled. To disable the <code...
    Rule Medium Severity
    Show

  • Disable the webadm_manage_user_files SELinux Boolean

    By default, the SELinux boolean <code>webadm_manage_user_files</code> is disabled. If this setting is enabled, it should be disabled. To disable t...
    Rule Medium Severity
    Show

  • Disable the webadm_read_user_files SELinux Boolean

    By default, the SELinux boolean <code>webadm_read_user_files</code> is disabled. If this setting is enabled, it should be disabled. To disable the...
    Rule Medium Severity
    Show

  • Disable the wine_mmap_zero_ignore SELinux Boolean

    By default, the SELinux boolean <code>wine_mmap_zero_ignore</code> is disabled. If this setting is enabled, it should be disabled. To disable the ...
    Rule Medium Severity
    Show

Node 2

siemur/test-space

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules