From 8742db86a76dc6f93702ea1854946fd225a405b3 Mon Sep 17 00:00:00 2001 From: Matthew Burket Date: Thu, 31 Oct 2024 16:49:37 -0500 Subject: [PATCH] Update RHEL 8 STIG due to rule removal --- .../configure_bashrc_tmux/rule.yml | 1 - .../configure_tmux_lock_after_time/rule.yml | 1 - .../configure_tmux_lock_command/rule.yml | 1 - .../configure_tmux_lock_keybinding/rule.yml | 1 - .../no_tmux_in_shells/rule.yml | 1 - .../package_tmux_installed/rule.yml | 1 - .../agent_mfetpd_running/rule.yml | 1 - products/rhel8/profiles/stig.profile | 20 ------------------- 8 files changed, 27 deletions(-) diff --git a/linux_os/guide/system/accounts/accounts-physical/screen_locking/console_screen_locking/configure_bashrc_tmux/rule.yml b/linux_os/guide/system/accounts/accounts-physical/screen_locking/console_screen_locking/configure_bashrc_tmux/rule.yml index e789069b840..65af5ce21bd 100644 --- a/linux_os/guide/system/accounts/accounts-physical/screen_locking/console_screen_locking/configure_bashrc_tmux/rule.yml +++ b/linux_os/guide/system/accounts/accounts-physical/screen_locking/console_screen_locking/configure_bashrc_tmux/rule.yml @@ -27,7 +27,6 @@ references: disa: CCI-000060,CCI-000056 srg: SRG-OS-000031-GPOS-00012,SRG-OS-000028-GPOS-00009,SRG-OS-000030-GPOS-00011 stigid@ol8: OL08-00-020041 - stigid@rhel8: RHEL-08-020041 platform: package[tmux] diff --git a/linux_os/guide/system/accounts/accounts-physical/screen_locking/console_screen_locking/configure_tmux_lock_after_time/rule.yml b/linux_os/guide/system/accounts/accounts-physical/screen_locking/console_screen_locking/configure_tmux_lock_after_time/rule.yml index b30afaa1517..6a00bbb670b 100644 --- a/linux_os/guide/system/accounts/accounts-physical/screen_locking/console_screen_locking/configure_tmux_lock_after_time/rule.yml +++ b/linux_os/guide/system/accounts/accounts-physical/screen_locking/console_screen_locking/configure_tmux_lock_after_time/rule.yml @@ -25,7 +25,6 @@ references: ospp: FMT_SMF_EXT.1,FMT_MOF_EXT.1,FTA_SSL.1 srg: SRG-OS-000029-GPOS-00010,SRG-OS-000031-GPOS-00012 stigid@ol8: OL08-00-020070 - stigid@rhel8: RHEL-08-020070 platform: package[tmux] diff --git a/linux_os/guide/system/accounts/accounts-physical/screen_locking/console_screen_locking/configure_tmux_lock_command/rule.yml b/linux_os/guide/system/accounts/accounts-physical/screen_locking/console_screen_locking/configure_tmux_lock_command/rule.yml index e5921fb36c0..547e82ea883 100644 --- a/linux_os/guide/system/accounts/accounts-physical/screen_locking/console_screen_locking/configure_tmux_lock_command/rule.yml +++ b/linux_os/guide/system/accounts/accounts-physical/screen_locking/console_screen_locking/configure_tmux_lock_command/rule.yml @@ -30,7 +30,6 @@ references: ospp: FMT_SMF_EXT.1,FMT_MOF_EXT.1,FTA_SSL.1 srg: SRG-OS-000028-GPOS-00009,SRG-OS-000030-GPOS-00011 stigid@ol8: OL08-00-020040 - stigid@rhel8: RHEL-08-020040 platform: package[tmux] diff --git a/linux_os/guide/system/accounts/accounts-physical/screen_locking/console_screen_locking/configure_tmux_lock_keybinding/rule.yml b/linux_os/guide/system/accounts/accounts-physical/screen_locking/console_screen_locking/configure_tmux_lock_keybinding/rule.yml index a40f5a68047..587e15d8482 100644 --- a/linux_os/guide/system/accounts/accounts-physical/screen_locking/console_screen_locking/configure_tmux_lock_keybinding/rule.yml +++ b/linux_os/guide/system/accounts/accounts-physical/screen_locking/console_screen_locking/configure_tmux_lock_keybinding/rule.yml @@ -27,7 +27,6 @@ references: disa: CCI-000056 srg: SRG-OS-000028-GPOS-00009,SRG-OS-000030-GPOS-00011 stigid@ol8: OL08-00-020040 - stigid@rhel8: RHEL-08-020040 platform: package[tmux] diff --git a/linux_os/guide/system/accounts/accounts-physical/screen_locking/console_screen_locking/no_tmux_in_shells/rule.yml b/linux_os/guide/system/accounts/accounts-physical/screen_locking/console_screen_locking/no_tmux_in_shells/rule.yml index 8ca6f872440..f7bb4ec6ebd 100644 --- a/linux_os/guide/system/accounts/accounts-physical/screen_locking/console_screen_locking/no_tmux_in_shells/rule.yml +++ b/linux_os/guide/system/accounts/accounts-physical/screen_locking/console_screen_locking/no_tmux_in_shells/rule.yml @@ -26,7 +26,6 @@ references: ospp: FMT_SMF_EXT.1,FMT_MOF_EXT.1,FTA_SSL.1 srg: SRG-OS-000324-GPOS-00125,SRG-OS-000028-GPOS-00009,SRG-OS-000030-GPOS-00011 stigid@ol8: OL08-00-020042 - stigid@rhel8: RHEL-08-020042 ocil_clause: 'tmux is listed in /etc/shells' diff --git a/linux_os/guide/system/accounts/accounts-physical/screen_locking/console_screen_locking/package_tmux_installed/rule.yml b/linux_os/guide/system/accounts/accounts-physical/screen_locking/console_screen_locking/package_tmux_installed/rule.yml index a07a286ada9..f42a98c9f1b 100644 --- a/linux_os/guide/system/accounts/accounts-physical/screen_locking/console_screen_locking/package_tmux_installed/rule.yml +++ b/linux_os/guide/system/accounts/accounts-physical/screen_locking/console_screen_locking/package_tmux_installed/rule.yml @@ -43,7 +43,6 @@ references: ospp: FMT_SMF_EXT.1,FMT_MOF_EXT.1,FTA_SSL.1 srg: SRG-OS-000030-GPOS-00011,SRG-OS-000028-GPOS-00009 stigid@ol8: OL08-00-020039 - stigid@rhel8: RHEL-08-020039 ocil_clause: 'the package is not installed' diff --git a/linux_os/guide/system/software/integrity/endpoint_security_software/mcafee_security_software/mcafee_endpoint_security_software/agent_mfetpd_running/rule.yml b/linux_os/guide/system/software/integrity/endpoint_security_software/mcafee_security_software/mcafee_endpoint_security_software/agent_mfetpd_running/rule.yml index 0bc6053bf1c..ff5efb08097 100644 --- a/linux_os/guide/system/software/integrity/endpoint_security_software/mcafee_security_software/mcafee_endpoint_security_software/agent_mfetpd_running/rule.yml +++ b/linux_os/guide/system/software/integrity/endpoint_security_software/mcafee_security_software/mcafee_endpoint_security_software/agent_mfetpd_running/rule.yml @@ -24,7 +24,6 @@ references: disa: CCI-001263,CCI-000366 nist: SI-2(2) srg: SRG-OS-000191-GPOS-00080 - stigid@rhel8: RHEL-08-010001 stigid@sle12: SLES-12-010599 ocil_clause: 'virus scanning software is not running' diff --git a/products/rhel8/profiles/stig.profile b/products/rhel8/profiles/stig.profile index 2c22752f7b5..12e0221e17a 100644 --- a/products/rhel8/profiles/stig.profile +++ b/products/rhel8/profiles/stig.profile @@ -92,10 +92,6 @@ selections: # RHEL-08-010000 - installed_OS_is_vendor_supported - # RHEL-08-010001 - - package_mcafeetp_installed - - agent_mfetpd_running - # RHEL-08-010010 - security_patches_up_to_date @@ -549,28 +545,12 @@ selections: - logind_session_timeout - var_logind_session_timeout=10_minutes - # RHEL-08-020039 - - package_tmux_installed - - # RHEL-08-020040 - - configure_tmux_lock_command - - configure_tmux_lock_keybinding - - # RHEL-08-020041 - - configure_bashrc_tmux - - # RHEL-08-020042 - - no_tmux_in_shells - # RHEL-08-020050 - dconf_gnome_lock_screen_on_smartcard_removal # RHEL-08-020060 - dconf_gnome_screensaver_idle_delay - # RHEL-08-020070 - - configure_tmux_lock_after_time - # RHEL-08-020080 - dconf_gnome_screensaver_user_locks