Skip to content
ATO Pathways
  Log In

Oracle Linux 8 Security Technical Implementation Guide

Rules, Groups, and Values defined within the XCCDF Benchmark

  • SRG-OS-000480-GPOS-00227

    <GroupDescription></GroupDescription>
    Group
    Show

  • A separate OL 8 filesystem must be used for user home directories (such as "/home" or an equivalent).

    &lt;VulnDiscussion&gt;The use of separate file systems for different paths can protect the system from failures resulting from a file system becomi...
    Rule Medium Severity
    Show

  • SRG-OS-000480-GPOS-00229

    <GroupDescription></GroupDescription>
    Group
    Show

  • Unattended or automatic logon via the OL 8 graphical user interface must not be allowed.

    &lt;VulnDiscussion&gt;Failure to restrict system access to authenticated users negatively impacts operating system security.&lt;/VulnDiscussion&gt;...
    Rule High Severity
    Show

  • SRG-OS-000480-GPOS-00229

    <GroupDescription></GroupDescription>
    Group
    Show

  • OL 8 must not allow users to override SSH environment variables.

    &lt;VulnDiscussion&gt;SSH environment options potentially allow users to bypass access restriction in some configurations.&lt;/VulnDiscussion&gt;&l...
    Rule High Severity
    Show

  • SRG-OS-000002-GPOS-00002

    <GroupDescription></GroupDescription>
    Group
    Show

  • SRG-OS-000037-GPOS-00015

    <GroupDescription></GroupDescription>
    Group
    Show

  • The OL 8 audit package must be installed.

    &lt;VulnDiscussion&gt;Without establishing what type of events occurred and their source, location, and outcome, it would be difficult to establish...
    Rule Medium Severity
    Show

  • SRG-OS-000037-GPOS-00015

    <GroupDescription></GroupDescription>
    Group
    Show

  • OL 8 audit records must contain information to establish what type of events occurred, the source of events, where events occurred, and the outcome of events.

    &lt;VulnDiscussion&gt;Without establishing what type of events occurred and their source, location, and outcome, it would be difficult to establish...
    Rule Medium Severity
    Show

  • SRG-OS-000480-GPOS-00227

    <GroupDescription></GroupDescription>
    Group
    Show

  • OL 8 must be a vendor-supported release.

    &lt;VulnDiscussion&gt;Configuring the operating system to implement organization-wide security implementation guides and security checklists verifi...
    Rule High Severity
    Show

  • SRG-OS-000480-GPOS-00227

    <GroupDescription></GroupDescription>
    Group
    Show

  • OL 8 vendor-packaged system security patches and updates must be installed and up to date.

    &lt;VulnDiscussion&gt;Timely patching is critical for maintaining the operational availability, confidentiality, and integrity of information techn...
    Rule Medium Severity
    Show

  • SRG-OS-000033-GPOS-00014

    <GroupDescription></GroupDescription>
    Group
    Show

  • OL 8 must implement NIST FIPS-validated cryptography for the following: To provision digital signatures, to generate cryptographic hashes, and to protect data requiring data-at-rest protections in accordance with applicable federal laws, Executive Orders, directives, policies, regulations, and standards.

    &lt;VulnDiscussion&gt;Use of weak or untested encryption algorithms undermines the purposes of using encryption to protect data. The operating syst...
    Rule High Severity
    Show

  • SRG-OS-000185-GPOS-00079

    <GroupDescription></GroupDescription>
    Group
    Show

  • All OL 8 local disk partitions must implement cryptographic mechanisms to prevent unauthorized disclosure or modification of all information that requires at-rest protection.

    &lt;VulnDiscussion&gt;OL 8 systems handling data requiring "data-at-rest" protections must employ cryptographic mechanisms to prevent unauthorized ...
    Rule High Severity
    Show

  • SRG-OS-000023-GPOS-00006

    <GroupDescription></GroupDescription>
    Group
    Show

Node 2

siemur/test-space

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules