Skip to content
ATO Pathways
  Log In

III - Administrative Classified

Rules and Groups employed by this XCCDF Profile

  • SRG-OS-000445-GPOS-00199

    <GroupDescription></GroupDescription>
    Group
    Show

  • RHEL 9 must use a Linux Security Module configured to enforce limits on system services.

    &lt;VulnDiscussion&gt;Without verification of the security functions, security functions may not operate correctly and the failure may go unnoticed...
    Rule High Severity
    Show

  • SRG-OS-000445-GPOS-00199

    <GroupDescription></GroupDescription>
    Group
    Show

  • RHEL 9 must enable the SELinux targeted policy.

    &lt;VulnDiscussion&gt;Setting the SELinux policy to "targeted" or a more specialized policy ensures the system will confine processes that are like...
    Rule Medium Severity
    Show

  • SRG-OS-000021-GPOS-00005

    <GroupDescription></GroupDescription>
    Group
    Show

  • RHEL 9 must configure SELinux context type to allow the use of a nondefault faillock tally directory.

    &lt;VulnDiscussion&gt;Not having the correct SELinux context on the faillock directory may lead to unauthorized access to the directory.&lt;/VulnDi...
    Rule Medium Severity
    Show

  • SRG-OS-000480-GPOS-00227

    <GroupDescription></GroupDescription>
    Group
    Show

  • RHEL 9 must have policycoreutils package installed.

    &lt;VulnDiscussion&gt;Without verification of the security functions, security functions may not operate correctly and the failure may go unnoticed...
    Rule Medium Severity
    Show

  • SRG-OS-000480-GPOS-00227

    <GroupDescription></GroupDescription>
    Group
    Show

  • RHEL 9 policycoreutils-python-utils package must be installed.

    &lt;VulnDiscussion&gt;The policycoreutils-python-utils package is required to operate and manage an SELinux environment and its policies. It provid...
    Rule Medium Severity
    Show

  • SRG-OS-000324-GPOS-00125

    <GroupDescription></GroupDescription>
    Group
    Show

  • RHEL 9 must have the sudo package installed.

    &lt;VulnDiscussion&gt;"sudo" is a program designed to allow a system administrator to give limited root privileges to users and log root activity. ...
    Rule Medium Severity
    Show

  • SRG-OS-000373-GPOS-00156

    <GroupDescription></GroupDescription>
    Group
    Show

  • RHEL 9 must require reauthentication when using the "sudo" command.

    &lt;VulnDiscussion&gt;Without reauthentication, users may access resources or perform tasks for which they do not have authorization. When operat...
    Rule Medium Severity
    Show

  • SRG-OS-000480-GPOS-00227

    <GroupDescription></GroupDescription>
    Group
    Show

  • RHEL 9 must use the invoking user's password for privilege escalation when using "sudo".

    &lt;VulnDiscussion&gt;If the rootpw, targetpw, or runaspw flags are defined and not disabled, by default the operating system will prompt the invok...
    Rule Medium Severity
    Show

  • SRG-OS-000373-GPOS-00156

    <GroupDescription></GroupDescription>
    Group
    Show

  • RHEL 9 must require users to reauthenticate for privilege escalation.

    &lt;VulnDiscussion&gt;Without reauthentication, users may access resources or perform tasks for which they do not have authorization. When operati...
    Rule Medium Severity
    Show

  • SRG-OS-000480-GPOS-00227

    <GroupDescription></GroupDescription>
    Group
    Show

  • RHEL 9 must restrict privilege elevation to authorized personnel.

    &lt;VulnDiscussion&gt;If the "sudoers" file is not configured correctly, any user defined on the system can initiate privileged actions on the targ...
    Rule Medium Severity
    Show

Node 2

siemur/test-space

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules