Skip to content

II - Mission Support Classified

Rules and Groups employed by this XCCDF Profile

  • SRG-APP-000429-CTR-001060

    <GroupDescription></GroupDescription>
    Group
  • Rancher RKE2 keystore must implement encryption to prevent unauthorized disclosure of information at rest within Rancher RKE2.

    &lt;VulnDiscussion&gt;Encrypting secrets at rest in etcd. By default, RKE2 will create an encryption key and configuration file and pass these to ...
    Rule High Severity
  • SRG-APP-000454-CTR-001110

    <GroupDescription></GroupDescription>
    Group
  • Rancher RKE2 must remove old components after updated versions have been installed.

    &lt;VulnDiscussion&gt;Previous versions of Rancher RKE2 components that are not removed after updates have been installed may be exploited by adver...
    Rule Medium Severity
  • SRG-APP-000456-CTR-001125

    <GroupDescription></GroupDescription>
    Group
  • Rancher RKE2 registry must contain the latest images with most recent updates and execute within Rancher RKE2 runtime as authorized by IAVM, CTOs, DTMs, and STIGs.

    &lt;VulnDiscussion&gt;Software supporting RKE2, images in the registry must stay up to date with the latest patches, service packs, and hot fixes. ...
    Rule Medium Severity
  • SRG-APP-000131-CTR-000285

    <GroupDescription></GroupDescription>
    Group
  • Rancher RKE2 must be built from verified packages.

    &lt;VulnDiscussion&gt;Only RKE2 images that have been properly signed by Rancher Government's authorized key will be deployed to ensure the cluster...
    Rule Medium Severity

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules