Skip to content

III - Administrative Classified

Rules and Groups employed by this XCCDF Profile

  • SRG-OS-000480-GPOS-00227

    Group
  • RHEL 8 must use a separate file system for /var/log.

    The use of separate file systems for different paths can protect the system from failures resulting from a file system becoming full or failing.
    Rule Low Severity
  • SRG-OS-000480-GPOS-00227

    Group
  • RHEL 8 must use a separate file system for the system audit data path.

    The use of separate file systems for different paths can protect the system from failures resulting from a file system becoming full or failing.
    Rule Low Severity
  • SRG-OS-000480-GPOS-00227

    Group
  • A separate RHEL 8 filesystem must be used for the /tmp directory.

    The use of separate file systems for different paths can protect the system from failures resulting from a file system becoming full or failing.
    Rule Medium Severity
  • SRG-OS-000109-GPOS-00056

    Group
  • RHEL 8 must not permit direct logons to the root account using remote access via SSH.

    Even though the communications channel may be encrypted, an additional layer of security is gained by extending the policy of not logging on directly as root. In addition, logging on with a user-sp...
    Rule Medium Severity
  • SRG-OS-000480-GPOS-00227

    Group
  • The rsyslog service must be running in RHEL 8.

    Configuring RHEL 8 to implement organization-wide security implementation guides and security checklists ensures compliance with federal standards and establishes a common security baseline across ...
    Rule Medium Severity

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules