DISA STIG for Red Hat Enterprise Linux 9
Rules and Groups employed by this XCCDF Profile
-
Ensure invoking users password for privilege escalation when using sudo
The sudoers security policy requires that users authenticate themselves before they can use sudo. When sudoers requires authentication, it validate...Rule Medium Severity -
System Tooling / Utilities
The following checks evaluate the system for recommended base packages -- both for installation and removal.Group -
Ensure gnutls-utils is installed
Thegnutls-utils
package can be installed with the following command:$ sudo dnf install gnutls-utils
Rule Medium Severity -
Ensure nss-tools is installed
Thenss-tools
package can be installed with the following command:$ sudo dnf install nss-tools
Rule Medium Severity -
Install rng-tools Package
Therng-tools
package can be installed with the following command:$ sudo dnf install rng-tools
Rule Low Severity -
Install subscription-manager Package
Thesubscription-manager
package can be installed with the following command:$ sudo dnf install subscription-manager
Rule Medium Severity -
Uninstall gssproxy Package
Thegssproxy
package can be removed with the following command:$ sudo dnf erase gssproxy
Rule Medium Severity -
Uninstall iprutils Package
Theiprutils
package can be removed with the following command:$ sudo dnf erase iprutils
Rule Medium Severity -
Uninstall tuned Package
Thetuned
package can be removed with the following command:$ sudo dnf erase tuned
Rule Medium Severity -
Updating Software
The <code>dnf</code> command line tool is used to install and update software packages. The system also provides a graphical software update tool i...Group
Node 2
The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.
Capacity
Modules