Skip to content
ATO Pathways
  Log In

Red Hat Enterprise Linux 9 Security Technical Implementation Guide

Rules, Groups, and Values defined within the XCCDF Benchmark

  • SRG-OS-000480-GPOS-00228

    <GroupDescription></GroupDescription>
    Group
    Show

  • RHEL 9 must define default permissions for all authenticated users in such a way that the user can only read and modify their own files.

    &lt;VulnDiscussion&gt;Setting the most restrictive default permissions ensures that when new accounts are created, they do not have unnecessary acc...
    Rule Medium Severity
    Show

  • SRG-OS-000480-GPOS-00228

    <GroupDescription></GroupDescription>
    Group
    Show

  • SRG-OS-000021-GPOS-00005

    <GroupDescription></GroupDescription>
    Group
    Show

  • RHEL 9 must define default permissions for the system default profile.

    &lt;VulnDiscussion&gt;The umask controls the default access mode assigned to newly created files. A umask of 077 limits new files to mode 600 or le...
    Rule Medium Severity
    Show

  • SRG-OS-000480-GPOS-00227

    <GroupDescription></GroupDescription>
    Group
    Show

  • RHEL 9 must display the date and time of the last successful account logon upon logon.

    &lt;VulnDiscussion&gt;Users need to be aware of activity that occurs regarding their account. Providing users with information regarding the number...
    Rule Low Severity
    Show

  • SRG-OS-000163-GPOS-00072

    <GroupDescription></GroupDescription>
    Group
    Show

  • RHEL 9 must terminate idle user sessions.

    &lt;VulnDiscussion&gt;Terminating an idle session within a short time period reduces the window of opportunity for unauthorized personnel to take c...
    Rule Medium Severity
    Show

  • SRG-OS-000445-GPOS-00199

    <GroupDescription></GroupDescription>
    Group
    Show

  • RHEL 9 must use a Linux Security Module configured to enforce limits on system services.

    &lt;VulnDiscussion&gt;Without verification of the security functions, security functions may not operate correctly and the failure may go unnoticed...
    Rule High Severity
    Show

  • SRG-OS-000445-GPOS-00199

    <GroupDescription></GroupDescription>
    Group
    Show

  • RHEL 9 must enable the SELinux targeted policy.

    &lt;VulnDiscussion&gt;Setting the SELinux policy to "targeted" or a more specialized policy ensures the system will confine processes that are like...
    Rule Medium Severity
    Show

  • SRG-OS-000021-GPOS-00005

    <GroupDescription></GroupDescription>
    Group
    Show

  • RHEL 9 must configure SELinux context type to allow the use of a nondefault faillock tally directory.

    &lt;VulnDiscussion&gt;Not having the correct SELinux context on the faillock directory may lead to unauthorized access to the directory.&lt;/VulnDi...
    Rule Medium Severity
    Show

  • SRG-OS-000480-GPOS-00227

    <GroupDescription></GroupDescription>
    Group
    Show

  • RHEL 9 must have policycoreutils package installed.

    &lt;VulnDiscussion&gt;Without verification of the security functions, security functions may not operate correctly and the failure may go unnoticed...
    Rule Medium Severity
    Show

  • SRG-OS-000480-GPOS-00227

    <GroupDescription></GroupDescription>
    Group
    Show

  • RHEL 9 policycoreutils-python-utils package must be installed.

    &lt;VulnDiscussion&gt;The policycoreutils-python-utils package is required to operate and manage an SELinux environment and its policies. It provid...
    Rule Medium Severity
    Show

  • SRG-OS-000324-GPOS-00125

    <GroupDescription></GroupDescription>
    Group
    Show

Node 2

siemur/test-space

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules