Skip to content
ATO Pathways
  Log In

Red Hat Enterprise Linux 9 Security Technical Implementation Guide

Rules, Groups, and Values defined within the XCCDF Benchmark

  • SRG-OS-000437-GPOS-00194

    <GroupDescription></GroupDescription>
    Group
    Show

  • RHEL 9 must remove all software components after updated versions have been installed.

    &lt;VulnDiscussion&gt;Previous versions of software components that are not removed from the information system after updates have been installed m...
    Rule Low Severity
    Show

  • SRG-OS-000366-GPOS-00153

    <GroupDescription></GroupDescription>
    Group
    Show

  • RHEL 9 subscription-manager package must be installed.

    &lt;VulnDiscussion&gt;The Red Hat Subscription Manager application manages software subscriptions and software repositories for installed software ...
    Rule Medium Severity
    Show

  • SRG-OS-000074-GPOS-00042

    <GroupDescription></GroupDescription>
    Group
    Show

  • RHEL 9 must not have a File Transfer Protocol (FTP) server package installed.

    &lt;VulnDiscussion&gt;The FTP service provides an unencrypted remote access that does not provide for the confidentiality and integrity of user pas...
    Rule High Severity
    Show

  • SRG-OS-000480-GPOS-00227

    <GroupDescription></GroupDescription>
    Group
    Show

  • RHEL 9 must not have the sendmail package installed.

    &lt;VulnDiscussion&gt;The sendmail software was not developed with security in mind, and its design prevents it from being effectively contained by...
    Rule Medium Severity
    Show

  • SRG-OS-000095-GPOS-00049

    <GroupDescription></GroupDescription>
    Group
    Show

  • RHEL 9 must not have the nfs-utils package installed.

    &lt;VulnDiscussion&gt;"nfs-utils" provides a daemon for the kernel NFS server and related tools. This package also contains the "showmount" program...
    Rule Medium Severity
    Show

  • SRG-OS-000095-GPOS-00049

    <GroupDescription></GroupDescription>
    Group
    Show

  • RHEL 9 must not have the ypserv package installed.

    &lt;VulnDiscussion&gt;The NIS service provides an unencrypted authentication service, which does not provide for the confidentiality and integrity ...
    Rule Medium Severity
    Show

  • SRG-OS-000095-GPOS-00049

    <GroupDescription></GroupDescription>
    Group
    Show

  • RHEL 9 must not have the rsh-server package installed.

    &lt;VulnDiscussion&gt;The "rsh-server" service provides unencrypted remote access service, which does not provide for the confidentiality and integ...
    Rule Medium Severity
    Show

  • SRG-OS-000095-GPOS-00049

    <GroupDescription></GroupDescription>
    Group
    Show

  • RHEL 9 must not have the telnet-server package installed.

    &lt;VulnDiscussion&gt;It is detrimental for operating systems to provide, or install by default, functionality exceeding requirements or mission ob...
    Rule Medium Severity
    Show

  • SRG-OS-000095-GPOS-00049

    <GroupDescription></GroupDescription>
    Group
    Show

  • SRG-OS-000480-GPOS-00227

    <GroupDescription></GroupDescription>
    Group
    Show

  • RHEL 9 must not have the gssproxy package installed.

    &lt;VulnDiscussion&gt;It is detrimental for operating systems to provide, or install by default, functionality exceeding requirements or mission ob...
    Rule Medium Severity
    Show

  • RHEL 9 must not have the iprutils package installed.

    &lt;VulnDiscussion&gt;It is detrimental for operating systems to provide, or install by default, functionality exceeding requirements or mission ob...
    Rule Medium Severity
    Show

Node 2

siemur/test-space

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules