|
 |
0c1482 |
commit f2a0e48d89e6e8c879a2eb94dc4adec2da988f78
|
|
|
0c1482 |
Author: Gabriel Becker <ggasparb@redhat.com>
|
|
|
0c1482 |
Date: Thu Feb 17 12:48:39 2022 +0100
|
|
|
0c1482 |
|
|
|
0c1482 |
Custom patch for RHEL7.9 PR 8225.
|
|
|
0c1482 |
|
|
|
0c1482 |
diff --git a/linux_os/guide/system/auditing/auditd_configure_rules/audit_dac_actions/audit_rules_dac_modification_fchmod/rule.yml b/linux_os/guide/system/auditing/auditd_configure_rules/audit_dac_actions/audit_rules_dac_modification_fchmod/rule.yml
|
|
|
0c1482 |
index 6c3cc55..e0615c4 100644
|
|
|
0c1482 |
--- a/linux_os/guide/system/auditing/auditd_configure_rules/audit_dac_actions/audit_rules_dac_modification_fchmod/rule.yml
|
|
|
0c1482 |
+++ b/linux_os/guide/system/auditing/auditd_configure_rules/audit_dac_actions/audit_rules_dac_modification_fchmod/rule.yml
|
|
|
0c1482 |
@@ -54,7 +54,7 @@ references:
|
|
|
0c1482 |
pcidss: Req-10.5.5
|
|
|
0c1482 |
srg: SRG-OS-000037-GPOS-00015,SRG-OS-000042-GPOS-00020,SRG-OS-000062-GPOS-00031,SRG-OS-000392-GPOS-00172,SRG-OS-000462-GPOS-00206,SRG-OS-000471-GPOS-00215,SRG-OS-000064-GPOS-00033,SRG-OS-000466-GPOS-00210,SRG-OS-000458-GPOS-00203
|
|
|
0c1482 |
stigid@ol7: OL07-00-030420
|
|
|
0c1482 |
- stigid@rhel7: RHEL-07-030420
|
|
|
0c1482 |
+ stigid@rhel7: RHEL-07-030410
|
|
|
0c1482 |
stigid@rhel8: RHEL-08-030540
|
|
|
0c1482 |
stigid@sle12: SLES-12-020470
|
|
|
0c1482 |
stigid@sle15: SLES-15-030300
|
|
|
0c1482 |
diff --git a/linux_os/guide/system/auditing/auditd_configure_rules/audit_dac_actions/audit_rules_dac_modification_fchmodat/rule.yml b/linux_os/guide/system/auditing/auditd_configure_rules/audit_dac_actions/audit_rules_dac_modification_fchmodat/rule.yml
|
|
|
0c1482 |
index 3e51d48..cd02e55 100644
|
|
|
0c1482 |
--- a/linux_os/guide/system/auditing/auditd_configure_rules/audit_dac_actions/audit_rules_dac_modification_fchmodat/rule.yml
|
|
|
0c1482 |
+++ b/linux_os/guide/system/auditing/auditd_configure_rules/audit_dac_actions/audit_rules_dac_modification_fchmodat/rule.yml
|
|
|
0c1482 |
@@ -54,7 +54,7 @@ references:
|
|
|
0c1482 |
pcidss: Req-10.5.5
|
|
|
0c1482 |
srg: SRG-OS-000037-GPOS-00015,SRG-OS-000042-GPOS-00020,SRG-OS-000062-GPOS-00031,SRG-OS-000392-GPOS-00172,SRG-OS-000462-GPOS-00206,SRG-OS-000471-GPOS-00215,SRG-OS-000064-GPOS-00033,SRG-OS-000466-GPOS-00210,SRG-OS-000458-GPOS-00203
|
|
|
0c1482 |
stigid@ol7: OL07-00-030430
|
|
|
0c1482 |
- stigid@rhel7: RHEL-07-030430
|
|
|
0c1482 |
+ stigid@rhel7: RHEL-07-030410
|
|
|
0c1482 |
stigid@rhel8: RHEL-08-030530
|
|
|
0c1482 |
stigid@sle12: SLES-12-020480
|
|
|
0c1482 |
stigid@sle15: SLES-12-030310
|
|
|
0c1482 |
diff --git a/linux_os/guide/system/auditing/auditd_configure_rules/audit_dac_actions/audit_rules_dac_modification_fchown/rule.yml b/linux_os/guide/system/auditing/auditd_configure_rules/audit_dac_actions/audit_rules_dac_modification_fchown/rule.yml
|
|
|
0c1482 |
index d89875f..d205ddb 100644
|
|
|
0c1482 |
--- a/linux_os/guide/system/auditing/auditd_configure_rules/audit_dac_actions/audit_rules_dac_modification_fchown/rule.yml
|
|
|
0c1482 |
+++ b/linux_os/guide/system/auditing/auditd_configure_rules/audit_dac_actions/audit_rules_dac_modification_fchown/rule.yml
|
|
|
0c1482 |
@@ -57,7 +57,7 @@ references:
|
|
|
0c1482 |
pcidss: Req-10.5.5
|
|
|
0c1482 |
srg: SRG-OS-000037-GPOS-00015,SRG-OS-000042-GPOS-00020,SRG-OS-000062-GPOS-00031,SRG-OS-000392-GPOS-00172,SRG-OS-000462-GPOS-00206,SRG-OS-000471-GPOS-00215,SRG-OS-000064-GPOS-00033,SRG-OS-000466-GPOS-00210,SRG-OS-000458-GPOS-00203,SRG-OS-000474-GPOS-00219
|
|
|
0c1482 |
stigid@ol7: OL07-00-030380
|
|
|
0c1482 |
- stigid@rhel7: RHEL-07-030380
|
|
|
0c1482 |
+ stigid@rhel7: RHEL-07-030370
|
|
|
0c1482 |
stigid@rhel8: RHEL-08-030520
|
|
|
0c1482 |
stigid@sle12: SLES-12-020430
|
|
|
0c1482 |
stigid@sle15: SLES-15-030260
|
|
|
0c1482 |
diff --git a/linux_os/guide/system/auditing/auditd_configure_rules/audit_dac_actions/audit_rules_dac_modification_fchownat/rule.yml b/linux_os/guide/system/auditing/auditd_configure_rules/audit_dac_actions/audit_rules_dac_modification_fchownat/rule.yml
|
|
|
0c1482 |
index e6caaeb..05c36ab 100644
|
|
|
0c1482 |
--- a/linux_os/guide/system/auditing/auditd_configure_rules/audit_dac_actions/audit_rules_dac_modification_fchownat/rule.yml
|
|
|
0c1482 |
+++ b/linux_os/guide/system/auditing/auditd_configure_rules/audit_dac_actions/audit_rules_dac_modification_fchownat/rule.yml
|
|
|
0c1482 |
@@ -54,7 +54,7 @@ references:
|
|
|
0c1482 |
pcidss: Req-10.5.5
|
|
|
0c1482 |
srg: SRG-OS-000037-GPOS-00015,SRG-OS-000042-GPOS-00020,SRG-OS-000062-GPOS-00031,SRG-OS-000392-GPOS-00172,SRG-OS-000462-GPOS-00206,SRG-OS-000471-GPOS-00215,SRG-OS-000064-GPOS-00033,SRG-OS-000466-GPOS-00210,SRG-OS-000458-GPOS-00203,SRG-OS-000474-GPOS-00219
|
|
|
0c1482 |
stigid@ol7: OL07-00-030400
|
|
|
0c1482 |
- stigid@rhel7: RHEL-07-030400
|
|
|
0c1482 |
+ stigid@rhel7: RHEL-07-030370
|
|
|
0c1482 |
stigid@rhel8: RHEL-08-030510
|
|
|
0c1482 |
stigid@sle12: SLES-12-020450
|
|
|
0c1482 |
stigid@sle15: SLES-15-030280
|
|
|
0c1482 |
diff --git a/linux_os/guide/system/auditing/auditd_configure_rules/audit_dac_actions/audit_rules_dac_modification_fremovexattr/rule.yml b/linux_os/guide/system/auditing/auditd_configure_rules/audit_dac_actions/audit_rules_dac_modification_fremovexattr/rule.yml
|
|
|
0c1482 |
index b9ad3c7..f37db41 100644
|
|
|
0c1482 |
--- a/linux_os/guide/system/auditing/auditd_configure_rules/audit_dac_actions/audit_rules_dac_modification_fremovexattr/rule.yml
|
|
|
0c1482 |
+++ b/linux_os/guide/system/auditing/auditd_configure_rules/audit_dac_actions/audit_rules_dac_modification_fremovexattr/rule.yml
|
|
|
0c1482 |
@@ -71,7 +71,7 @@ references:
|
|
|
0c1482 |
pcidss: Req-10.5.5
|
|
|
0c1482 |
srg: SRG-OS-000037-GPOS-00015,SRG-OS-000042-GPOS-00020,SRG-OS-000062-GPOS-00031,SRG-OS-000392-GPOS-00172,SRG-OS-000458-GPOS-00203,SRG-OS-000462-GPOS-00206,SRG-OS-000463-GPOS-00207,SRG-OS-000471-GPOS-00215,SRG-OS-000474-GPOS-00219,SRG-OS-000466-GPOS-00210,SRG-OS-000064-GPOS-00033
|
|
|
0c1482 |
stigid@ol7: OL07-00-030480
|
|
|
0c1482 |
- stigid@rhel7: RHEL-07-030480
|
|
|
0c1482 |
+ stigid@rhel7: RHEL-07-030440
|
|
|
0c1482 |
stigid@rhel8: RHEL-08-030240
|
|
|
0c1482 |
stigid@sle12: SLES-12-020410
|
|
|
0c1482 |
stigid@sle15: SLES-15-030210
|
|
|
0c1482 |
diff --git a/linux_os/guide/system/auditing/auditd_configure_rules/audit_dac_actions/audit_rules_dac_modification_fsetxattr/rule.yml b/linux_os/guide/system/auditing/auditd_configure_rules/audit_dac_actions/audit_rules_dac_modification_fsetxattr/rule.yml
|
|
|
0c1482 |
index cedf05f..f32a323 100644
|
|
|
0c1482 |
--- a/linux_os/guide/system/auditing/auditd_configure_rules/audit_dac_actions/audit_rules_dac_modification_fsetxattr/rule.yml
|
|
|
0c1482 |
+++ b/linux_os/guide/system/auditing/auditd_configure_rules/audit_dac_actions/audit_rules_dac_modification_fsetxattr/rule.yml
|
|
|
0c1482 |
@@ -66,7 +66,7 @@ references:
|
|
|
0c1482 |
pcidss: Req-10.5.5
|
|
|
0c1482 |
srg: SRG-OS-000037-GPOS-00015,SRG-OS-000042-GPOS-00020,SRG-OS-000062-GPOS-00031,SRG-OS-000392-GPOS-00172,SRG-OS-000458-GPOS-00203,SRG-OS-000462-GPOS-00206,SRG-OS-000463-GPOS-00207,SRG-OS-000468-GPOS-00212,SRG-OS-000471-GPOS-00215,SRG-OS-000474-GPOS-00219,SRG-OS-000064-GPOS-00033
|
|
|
0c1482 |
stigid@ol7: OL07-00-030450
|
|
|
0c1482 |
- stigid@rhel7: RHEL-07-030450
|
|
|
0c1482 |
+ stigid@rhel7: RHEL-07-030440
|
|
|
0c1482 |
stigid@rhel8: RHEL-08-030230
|
|
|
0c1482 |
stigid@sle12: SLES-12-020380
|
|
|
0c1482 |
stigid@sle15: SLES-15-030230
|
|
|
0c1482 |
diff --git a/linux_os/guide/system/auditing/auditd_configure_rules/audit_dac_actions/audit_rules_dac_modification_lchown/rule.yml b/linux_os/guide/system/auditing/auditd_configure_rules/audit_dac_actions/audit_rules_dac_modification_lchown/rule.yml
|
|
|
0c1482 |
index 190509c..954ff5a 100644
|
|
|
0c1482 |
--- a/linux_os/guide/system/auditing/auditd_configure_rules/audit_dac_actions/audit_rules_dac_modification_lchown/rule.yml
|
|
|
0c1482 |
+++ b/linux_os/guide/system/auditing/auditd_configure_rules/audit_dac_actions/audit_rules_dac_modification_lchown/rule.yml
|
|
|
0c1482 |
@@ -54,7 +54,7 @@ references:
|
|
|
0c1482 |
pcidss: Req-10.5.5
|
|
|
0c1482 |
srg: SRG-OS-000037-GPOS-00015,SRG-OS-000042-GPOS-00020,SRG-OS-000062-GPOS-00031,SRG-OS-000392-GPOS-00172,SRG-OS-000462-GPOS-00206,SRG-OS-000471-GPOS-00215,SRG-OS-000064-GPOS-00033,SRG-OS-000466-GPOS-00210,SRG-OS-000458-GPOS-00203,SRG-OS-000474-GPOS-00219
|
|
|
0c1482 |
stigid@ol7: OL07-00-030390
|
|
|
0c1482 |
- stigid@rhel7: RHEL-07-030390
|
|
|
0c1482 |
+ stigid@rhel7: RHEL-07-030370
|
|
|
0c1482 |
stigid@rhel8: RHEL-08-030500
|
|
|
0c1482 |
stigid@sle12: SLES-12-020440
|
|
|
0c1482 |
stigid@sle15: SLES-15-030270
|
|
|
0c1482 |
diff --git a/linux_os/guide/system/auditing/auditd_configure_rules/audit_dac_actions/audit_rules_dac_modification_lremovexattr/rule.yml b/linux_os/guide/system/auditing/auditd_configure_rules/audit_dac_actions/audit_rules_dac_modification_lremovexattr/rule.yml
|
|
|
0c1482 |
index ffdacdf..ab8a98b 100644
|
|
|
0c1482 |
--- a/linux_os/guide/system/auditing/auditd_configure_rules/audit_dac_actions/audit_rules_dac_modification_lremovexattr/rule.yml
|
|
|
0c1482 |
+++ b/linux_os/guide/system/auditing/auditd_configure_rules/audit_dac_actions/audit_rules_dac_modification_lremovexattr/rule.yml
|
|
|
0c1482 |
@@ -71,7 +71,7 @@ references:
|
|
|
0c1482 |
pcidss: Req-10.5.5
|
|
|
0c1482 |
srg: SRG-OS-000037-GPOS-00015,SRG-OS-000042-GPOS-00020,SRG-OS-000062-GPOS-00031,SRG-OS-000392-GPOS-00172,SRG-OS-000458-GPOS-00203,SRG-OS-000462-GPOS-00206,SRG-OS-000463-GPOS-00207,SRG-OS-000468-GPOS-00212,SRG-OS-000471-GPOS-00215,SRG-OS-000474-GPOS-00219,SRG-OS-000466-GPOS-00210,SRG-OS-000064-GPOS-00033
|
|
|
0c1482 |
stigid@ol7: OL07-00-030490
|
|
|
0c1482 |
- stigid@rhel7: RHEL-07-030490
|
|
|
0c1482 |
+ stigid@rhel7: RHEL-07-030440
|
|
|
0c1482 |
stigid@rhel8: RHEL-08-030200
|
|
|
0c1482 |
stigid@sle12: SLES-12-020400
|
|
|
0c1482 |
stigid@sle15: SLES-15-030200
|
|
|
0c1482 |
diff --git a/linux_os/guide/system/auditing/auditd_configure_rules/audit_dac_actions/audit_rules_dac_modification_lsetxattr/rule.yml b/linux_os/guide/system/auditing/auditd_configure_rules/audit_dac_actions/audit_rules_dac_modification_lsetxattr/rule.yml
|
|
|
0c1482 |
index 3662262..885da73 100644
|
|
|
0c1482 |
--- a/linux_os/guide/system/auditing/auditd_configure_rules/audit_dac_actions/audit_rules_dac_modification_lsetxattr/rule.yml
|
|
|
0c1482 |
+++ b/linux_os/guide/system/auditing/auditd_configure_rules/audit_dac_actions/audit_rules_dac_modification_lsetxattr/rule.yml
|
|
|
0c1482 |
@@ -65,7 +65,7 @@ references:
|
|
|
0c1482 |
pcidss: Req-10.5.5
|
|
|
0c1482 |
srg: SRG-OS-000037-GPOS-00015,SRG-OS-000042-GPOS-00020,SRG-OS-000062-GPOS-00031,SRG-OS-000392-GPOS-00172,SRG-OS-000458-GPOS-00203,SRG-OS-000462-GPOS-00206,SRG-OS-000463-GPOS-00207,SRG-OS-000468-GPOS-00212,SRG-OS-000471-GPOS-00215,SRG-OS-000474-GPOS-00219,SRG-OS-000064-GPOS-00033
|
|
|
0c1482 |
stigid@ol7: OL07-00-030460
|
|
|
0c1482 |
- stigid@rhel7: RHEL-07-030460
|
|
|
0c1482 |
+ stigid@rhel7: RHEL-07-030440
|
|
|
0c1482 |
stigid@rhel8: RHEL-08-030220
|
|
|
0c1482 |
stigid@sle15: SLES-15-030240
|
|
|
0c1482 |
stigid@ubuntu2004: UBTU-20-010143
|
|
|
0c1482 |
diff --git a/linux_os/guide/system/auditing/auditd_configure_rules/audit_dac_actions/audit_rules_dac_modification_removexattr/rule.yml b/linux_os/guide/system/auditing/auditd_configure_rules/audit_dac_actions/audit_rules_dac_modification_removexattr/rule.yml
|
|
|
0c1482 |
index ac9d349..4bbb500 100644
|
|
|
0c1482 |
--- a/linux_os/guide/system/auditing/auditd_configure_rules/audit_dac_actions/audit_rules_dac_modification_removexattr/rule.yml
|
|
|
0c1482 |
+++ b/linux_os/guide/system/auditing/auditd_configure_rules/audit_dac_actions/audit_rules_dac_modification_removexattr/rule.yml
|
|
|
0c1482 |
@@ -70,7 +70,7 @@ references:
|
|
|
0c1482 |
pcidss: Req-10.5.5
|
|
|
0c1482 |
srg: SRG-OS-000037-GPOS-00015,SRG-OS-000042-GPOS-00020,SRG-OS-000062-GPOS-00031,SRG-OS-000392-GPOS-00172,SRG-OS-000458-GPOS-00203,SRG-OS-000462-GPOS-00206,SRG-OS-000463-GPOS-00207,SRG-OS-000468-GPOS-00212,SRG-OS-000471-GPOS-00215,SRG-OS-000474-GPOS-00219,SRG-OS-000466-GPOS-00210,SRG-OS-000064-GPOS-00033
|
|
|
0c1482 |
stigid@ol7: OL07-00-030470
|
|
|
0c1482 |
- stigid@rhel7: RHEL-07-030470
|
|
|
0c1482 |
+ stigid@rhel7: RHEL-07-030440
|
|
|
0c1482 |
stigid@rhel8: RHEL-08-030210
|
|
|
0c1482 |
stigid@sle12: SLES-12-020390
|
|
|
0c1482 |
stigid@sle15: SLES-15-030190
|
|
|
0c1482 |
diff --git a/linux_os/guide/system/auditing/auditd_configure_rules/audit_file_deletion_events/audit_rules_file_deletion_events_rename/rule.yml b/linux_os/guide/system/auditing/auditd_configure_rules/audit_file_deletion_events/audit_rules_file_deletion_events_rename/rule.yml
|
|
|
0c1482 |
index 2f2d75a..2ae4d05 100644
|
|
|
0c1482 |
--- a/linux_os/guide/system/auditing/auditd_configure_rules/audit_file_deletion_events/audit_rules_file_deletion_events_rename/rule.yml
|
|
|
0c1482 |
+++ b/linux_os/guide/system/auditing/auditd_configure_rules/audit_file_deletion_events/audit_rules_file_deletion_events_rename/rule.yml
|
|
|
0c1482 |
@@ -47,7 +47,7 @@ references:
|
|
|
0c1482 |
pcidss: Req-10.2.7
|
|
|
0c1482 |
srg: SRG-OS-000037-GPOS-00015,SRG-OS-000042-GPOS-00020,SRG-OS-000062-GPOS-00031,SRG-OS-000392-GPOS-00172,SRG-OS-000462-GPOS-00206,SRG-OS-000471-GPOS-00215,SRG-OS-000466-GPOS-00210,SRG-OS-000467-GPOS-00211,SRG-OS-000468-GPOS-00212
|
|
|
0c1482 |
stigid@ol7: OL07-00-030880
|
|
|
0c1482 |
- stigid@rhel7: RHEL-07-030880
|
|
|
0c1482 |
+ stigid@rhel7: RHEL-07-030910
|
|
|
0c1482 |
stigid@rhel8: RHEL-08-030361
|
|
|
0c1482 |
stigid@ubuntu2004: UBTU-20-010269
|
|
|
0c1482 |
vmmsrg: SRG-OS-000466-VMM-001870,SRG-OS-000468-VMM-001890
|
|
|
0c1482 |
diff --git a/linux_os/guide/system/auditing/auditd_configure_rules/audit_file_deletion_events/audit_rules_file_deletion_events_renameat/rule.yml b/linux_os/guide/system/auditing/auditd_configure_rules/audit_file_deletion_events/audit_rules_file_deletion_events_renameat/rule.yml
|
|
|
0c1482 |
index 37620a3..c7d2008 100644
|
|
|
0c1482 |
--- a/linux_os/guide/system/auditing/auditd_configure_rules/audit_file_deletion_events/audit_rules_file_deletion_events_renameat/rule.yml
|
|
|
0c1482 |
+++ b/linux_os/guide/system/auditing/auditd_configure_rules/audit_file_deletion_events/audit_rules_file_deletion_events_renameat/rule.yml
|
|
|
0c1482 |
@@ -47,7 +47,7 @@ references:
|
|
|
0c1482 |
pcidss: Req-10.2.7
|
|
|
0c1482 |
srg: SRG-OS-000037-GPOS-00015,SRG-OS-000042-GPOS-00020,SRG-OS-000062-GPOS-00031,SRG-OS-000392-GPOS-00172,SRG-OS-000462-GPOS-00206,SRG-OS-000471-GPOS-00215,SRG-OS-000466-GPOS-00210,SRG-OS-000467-GPOS-00211,SRG-OS-000468-GPOS-00212
|
|
|
0c1482 |
stigid@ol7: OL07-00-030890
|
|
|
0c1482 |
- stigid@rhel7: RHEL-07-030890
|
|
|
0c1482 |
+ stigid@rhel7: RHEL-07-030910
|
|
|
0c1482 |
stigid@rhel8: RHEL-08-030362
|
|
|
0c1482 |
stigid@ubuntu2004: UBTU-20-010270
|
|
|
0c1482 |
vmmsrg: SRG-OS-000466-VMM-001870,SRG-OS-000468-VMM-001890
|
|
|
0c1482 |
diff --git a/linux_os/guide/system/auditing/auditd_configure_rules/audit_file_deletion_events/audit_rules_file_deletion_events_rmdir/rule.yml b/linux_os/guide/system/auditing/auditd_configure_rules/audit_file_deletion_events/audit_rules_file_deletion_events_rmdir/rule.yml
|
|
|
0c1482 |
index e6b4004..e8d3826 100644
|
|
|
0c1482 |
--- a/linux_os/guide/system/auditing/auditd_configure_rules/audit_file_deletion_events/audit_rules_file_deletion_events_rmdir/rule.yml
|
|
|
0c1482 |
+++ b/linux_os/guide/system/auditing/auditd_configure_rules/audit_file_deletion_events/audit_rules_file_deletion_events_rmdir/rule.yml
|
|
|
0c1482 |
@@ -46,7 +46,7 @@ references:
|
|
|
0c1482 |
pcidss: Req-10.2.7
|
|
|
0c1482 |
srg: SRG-OS-000037-GPOS-00015,SRG-OS-000042-GPOS-00020,SRG-OS-000062-GPOS-00031,SRG-OS-000392-GPOS-00172,SRG-OS-000462-GPOS-00206,SRG-OS-000471-GPOS-00215,SRG-OS-000466-GPOS-00210,SRG-OS-000467-GPOS-00211,SRG-OS-000468-GPOS-00212
|
|
|
0c1482 |
stigid@ol7: OL07-00-030900
|
|
|
0c1482 |
- stigid@rhel7: RHEL-07-030900
|
|
|
0c1482 |
+ stigid@rhel7: RHEL-07-030910
|
|
|
0c1482 |
stigid@rhel8: RHEL-08-030363
|
|
|
0c1482 |
vmmsrg: SRG-OS-000466-VMM-001870,SRG-OS-000468-VMM-001890
|
|
|
0c1482 |
|
|
|
0c1482 |
diff --git a/linux_os/guide/system/auditing/auditd_configure_rules/audit_file_deletion_events/audit_rules_file_deletion_events_unlinkat/rule.yml b/linux_os/guide/system/auditing/auditd_configure_rules/audit_file_deletion_events/audit_rules_file_deletion_events_unlinkat/rule.yml
|
|
|
0c1482 |
index bd246f1..775072f 100644
|
|
|
0c1482 |
--- a/linux_os/guide/system/auditing/auditd_configure_rules/audit_file_deletion_events/audit_rules_file_deletion_events_unlinkat/rule.yml
|
|
|
0c1482 |
+++ b/linux_os/guide/system/auditing/auditd_configure_rules/audit_file_deletion_events/audit_rules_file_deletion_events_unlinkat/rule.yml
|
|
|
0c1482 |
@@ -47,7 +47,7 @@ references:
|
|
|
0c1482 |
pcidss: Req-10.2.7
|
|
|
0c1482 |
srg: SRG-OS-000037-GPOS-00015,SRG-OS-000042-GPOS-00020,SRG-OS-000062-GPOS-00031,SRG-OS-000392-GPOS-00172,SRG-OS-000462-GPOS-00206,SRG-OS-000471-GPOS-00215,SRG-OS-000466-GPOS-00210,SRG-OS-000467-GPOS-00211,SRG-OS-000468-GPOS-00212
|
|
|
0c1482 |
stigid@ol7: OL07-00-030920
|
|
|
0c1482 |
- stigid@rhel7: RHEL-07-030920
|
|
|
0c1482 |
+ stigid@rhel7: RHEL-07-030910
|
|
|
0c1482 |
stigid@rhel8: RHEL-08-030365
|
|
|
0c1482 |
stigid@ubuntu2004: UBTU-20-010268
|
|
|
0c1482 |
vmmsrg: SRG-OS-000466-VMM-001870,SRG-OS-000468-VMM-001890
|
|
|
0c1482 |
diff --git a/linux_os/guide/system/auditing/auditd_configure_rules/audit_file_modification/audit_rules_unsuccessful_file_modification_creat/rule.yml b/linux_os/guide/system/auditing/auditd_configure_rules/audit_file_modification/audit_rules_unsuccessful_file_modification_creat/rule.yml
|
|
|
0c1482 |
index 5c751cb..4ed1cde 100644
|
|
|
0c1482 |
--- a/linux_os/guide/system/auditing/auditd_configure_rules/audit_file_modification/audit_rules_unsuccessful_file_modification_creat/rule.yml
|
|
|
0c1482 |
+++ b/linux_os/guide/system/auditing/auditd_configure_rules/audit_file_modification/audit_rules_unsuccessful_file_modification_creat/rule.yml
|
|
|
0c1482 |
@@ -59,7 +59,7 @@ references:
|
|
|
0c1482 |
pcidss: Req-10.2.4,Req-10.2.1
|
|
|
0c1482 |
srg: SRG-OS-000037-GPOS-00015,SRG-OS-000042-GPOS-00020,SRG-OS-000062-GPOS-00031,SRG-OS-000392-GPOS-00172,SRG-OS-000462-GPOS-00206,SRG-OS-000471-GPOS-00215,SRG-OS-000064-GPOS-00033,SRG-OS-000458-GPOS-00203,SRG-OS-000461-GPOS-00205
|
|
|
0c1482 |
stigid@ol7: OL07-00-030500
|
|
|
0c1482 |
- stigid@rhel7: RHEL-07-030500
|
|
|
0c1482 |
+ stigid@rhel7: RHEL-07-030510
|
|
|
0c1482 |
stigid@rhel8: RHEL-08-030470
|
|
|
0c1482 |
stigid@sle12: SLES-12-020520
|
|
|
0c1482 |
stigid@sle15: SLES-15-030160
|
|
|
0c1482 |
diff --git a/linux_os/guide/system/auditing/auditd_configure_rules/audit_file_modification/audit_rules_unsuccessful_file_modification_ftruncate/rule.yml b/linux_os/guide/system/auditing/auditd_configure_rules/audit_file_modification/audit_rules_unsuccessful_file_modification_ftruncate/rule.yml
|
|
|
0c1482 |
index 76bcea1..203aa4c 100644
|
|
|
0c1482 |
--- a/linux_os/guide/system/auditing/auditd_configure_rules/audit_file_modification/audit_rules_unsuccessful_file_modification_ftruncate/rule.yml
|
|
|
0c1482 |
+++ b/linux_os/guide/system/auditing/auditd_configure_rules/audit_file_modification/audit_rules_unsuccessful_file_modification_ftruncate/rule.yml
|
|
|
0c1482 |
@@ -62,7 +62,7 @@ references:
|
|
|
0c1482 |
pcidss: Req-10.2.4,Req-10.2.1
|
|
|
0c1482 |
srg: SRG-OS-000037-GPOS-00015,SRG-OS-000042-GPOS-00020,SRG-OS-000062-GPOS-00031,SRG-OS-000392-GPOS-00172,SRG-OS-000462-GPOS-00206,SRG-OS-000471-GPOS-00215,SRG-OS-000064-GPOS-00033,SRG-OS-000458-GPOS-00203,SRG-OS-000461-GPOS-00205
|
|
|
0c1482 |
stigid@ol7: OL07-00-030550
|
|
|
0c1482 |
- stigid@rhel7: RHEL-07-030550
|
|
|
0c1482 |
+ stigid@rhel7: RHEL-07-030510
|
|
|
0c1482 |
stigid@rhel8: RHEL-08-030460
|
|
|
0c1482 |
stigid@sle12: SLES-12-020510
|
|
|
0c1482 |
stigid@sle15: SLES-15-030320
|
|
|
0c1482 |
diff --git a/linux_os/guide/system/auditing/auditd_configure_rules/audit_file_modification/audit_rules_unsuccessful_file_modification_open_by_handle_at/rule.yml b/linux_os/guide/system/auditing/auditd_configure_rules/audit_file_modification/audit_rules_unsuccessful_file_modification_open_by_handle_at/rule.yml
|
|
|
0c1482 |
index 9bb5ffe..3d4cfba 100644
|
|
|
0c1482 |
--- a/linux_os/guide/system/auditing/auditd_configure_rules/audit_file_modification/audit_rules_unsuccessful_file_modification_open_by_handle_at/rule.yml
|
|
|
0c1482 |
+++ b/linux_os/guide/system/auditing/auditd_configure_rules/audit_file_modification/audit_rules_unsuccessful_file_modification_open_by_handle_at/rule.yml
|
|
|
0c1482 |
@@ -58,7 +58,7 @@ references:
|
|
|
0c1482 |
pcidss: Req-10.2.4,Req-10.2.1
|
|
|
0c1482 |
srg: SRG-OS-000037-GPOS-00015,SRG-OS-000042-GPOS-00020,SRG-OS-000062-GPOS-00031,SRG-OS-000392-GPOS-00172,SRG-OS-000462-GPOS-00206,SRG-OS-000471-GPOS-00215,SRG-OS-000064-GPOS-00033,SRG-OS-000458-GPOS-00203,SRG-OS-000461-GPOS-00205
|
|
|
0c1482 |
stigid@ol7: OL07-00-030530
|
|
|
0c1482 |
- stigid@rhel7: RHEL-07-030530
|
|
|
0c1482 |
+ stigid@rhel7: RHEL-07-030510
|
|
|
0c1482 |
stigid@rhel8: RHEL-08-030450
|
|
|
0c1482 |
stigid@sle12: SLES-12-020540
|
|
|
0c1482 |
stigid@sle15: SLES-15-030180
|
|
|
0c1482 |
diff --git a/linux_os/guide/system/auditing/auditd_configure_rules/audit_file_modification/audit_rules_unsuccessful_file_modification_openat/rule.yml b/linux_os/guide/system/auditing/auditd_configure_rules/audit_file_modification/audit_rules_unsuccessful_file_modification_openat/rule.yml
|
|
|
0c1482 |
index c99656c..5e58d02 100644
|
|
|
0c1482 |
--- a/linux_os/guide/system/auditing/auditd_configure_rules/audit_file_modification/audit_rules_unsuccessful_file_modification_openat/rule.yml
|
|
|
0c1482 |
+++ b/linux_os/guide/system/auditing/auditd_configure_rules/audit_file_modification/audit_rules_unsuccessful_file_modification_openat/rule.yml
|
|
|
0c1482 |
@@ -62,7 +62,7 @@ references:
|
|
|
0c1482 |
pcidss: Req-10.2.4,Req-10.2.1
|
|
|
0c1482 |
srg: SRG-OS-000037-GPOS-00015,SRG-OS-000042-GPOS-00020,SRG-OS-000062-GPOS-00031,SRG-OS-000392-GPOS-00172,SRG-OS-000462-GPOS-00206,SRG-OS-000471-GPOS-00215,SRG-OS-000064-GPOS-00033,SRG-OS-000458-GPOS-00203,SRG-OS-000461-GPOS-00205
|
|
|
0c1482 |
stigid@ol7: OL07-00-030520
|
|
|
0c1482 |
- stigid@rhel7: RHEL-07-030520
|
|
|
0c1482 |
+ stigid@rhel7: RHEL-07-030510
|
|
|
0c1482 |
stigid@rhel8: RHEL-08-030430
|
|
|
0c1482 |
stigid@sle12: SLES-12-020530
|
|
|
0c1482 |
stigid@sle15: SLES-15-030170
|
|
|
0c1482 |
diff --git a/linux_os/guide/system/auditing/auditd_configure_rules/audit_file_modification/audit_rules_unsuccessful_file_modification_truncate/rule.yml b/linux_os/guide/system/auditing/auditd_configure_rules/audit_file_modification/audit_rules_unsuccessful_file_modification_truncate/rule.yml
|
|
|
0c1482 |
index 12771be..e1906b6 100644
|
|
|
0c1482 |
--- a/linux_os/guide/system/auditing/auditd_configure_rules/audit_file_modification/audit_rules_unsuccessful_file_modification_truncate/rule.yml
|
|
|
0c1482 |
+++ b/linux_os/guide/system/auditing/auditd_configure_rules/audit_file_modification/audit_rules_unsuccessful_file_modification_truncate/rule.yml
|
|
|
0c1482 |
@@ -61,7 +61,7 @@ references:
|
|
|
0c1482 |
pcidss: Req-10.2.4,Req-10.2.1
|
|
|
0c1482 |
srg: SRG-OS-000037-GPOS-00015,SRG-OS-000042-GPOS-00020,SRG-OS-000062-GPOS-00031,SRG-OS-000392-GPOS-00172,SRG-OS-000462-GPOS-00206,SRG-OS-000471-GPOS-00215,SRG-OS-000064-GPOS-00033,SRG-OS-000458-GPOS-00203,SRG-OS-000461-GPOS-00205
|
|
|
0c1482 |
stigid@ol7: OL07-00-030540
|
|
|
0c1482 |
- stigid@rhel7: RHEL-07-030540
|
|
|
0c1482 |
+ stigid@rhel7: RHEL-07-030510
|
|
|
0c1482 |
stigid@rhel8: RHEL-08-030420
|
|
|
0c1482 |
stigid@sle12: SLES-12-020500
|
|
|
0c1482 |
stigid@sle15: SLES-15-030610
|
|
|
0c1482 |
diff --git a/linux_os/guide/system/auditing/auditd_configure_rules/audit_kernel_module_loading/audit_rules_kernel_module_loading_finit/rule.yml b/linux_os/guide/system/auditing/auditd_configure_rules/audit_kernel_module_loading/audit_rules_kernel_module_loading_finit/rule.yml
|
|
|
0c1482 |
index aa17002..64bf354 100644
|
|
|
0c1482 |
--- a/linux_os/guide/system/auditing/auditd_configure_rules/audit_kernel_module_loading/audit_rules_kernel_module_loading_finit/rule.yml
|
|
|
0c1482 |
+++ b/linux_os/guide/system/auditing/auditd_configure_rules/audit_kernel_module_loading/audit_rules_kernel_module_loading_finit/rule.yml
|
|
|
0c1482 |
@@ -49,7 +49,7 @@ references:
|
|
|
0c1482 |
pcidss: Req-10.2.7
|
|
|
0c1482 |
srg: SRG-OS-000037-GPOS-00015,SRG-OS-000042-GPOS-00020,SRG-OS-000062-GPOS-00031,SRG-OS-000392-GPOS-00172,SRG-OS-000462-GPOS-00206,SRG-OS-000471-GPOS-00215,SRG-OS-000471-GPOS-00216,SRG-OS-000477-GPOS-00222
|
|
|
0c1482 |
stigid@ol7: OL07-00-030821
|
|
|
0c1482 |
- stigid@rhel7: RHEL-07-030821
|
|
|
0c1482 |
+ stigid@rhel7: RHEL-07-030820
|
|
|
0c1482 |
stigid@rhel8: RHEL-08-030380
|
|
|
0c1482 |
stigid@sle12: SLES-12-020740
|
|
|
0c1482 |
stigid@sle15: SLES-15-030530
|
|
|
0c1482 |
diff --git a/linux_os/guide/system/software/integrity/software-integrity/aide/package_aide_installed/rule.yml b/linux_os/guide/system/software/integrity/software-integrity/aide/package_aide_installed/rule.yml
|
|
|
0c1482 |
index 51adb67..4456e8b 100644
|
|
|
0c1482 |
--- a/linux_os/guide/system/software/integrity/software-integrity/aide/package_aide_installed/rule.yml
|
|
|
0c1482 |
+++ b/linux_os/guide/system/software/integrity/software-integrity/aide/package_aide_installed/rule.yml
|
|
|
0c1482 |
@@ -36,6 +36,7 @@ references:
|
|
|
0c1482 |
nist-csf: DE.CM-1,DE.CM-7,PR.DS-1,PR.DS-6,PR.DS-8,PR.IP-1,PR.IP-3
|
|
|
0c1482 |
pcidss: Req-11.5
|
|
|
0c1482 |
srg: SRG-OS-000363-GPOS-00150
|
|
|
0c1482 |
+ stigid@rhel7: RHEL-07-020029
|
|
|
0c1482 |
stigid@rhel8: RHEL-08-010360
|
|
|
0c1482 |
stigid@sle12: SLES-12-010500
|
|
|
0c1482 |
stigid@sle15: SLES-15-010420
|
|
|
0c1482 |
diff --git a/linux_os/guide/system/software/sudo/sudoers_default_includedir/rule.yml b/linux_os/guide/system/software/sudo/sudoers_default_includedir/rule.yml
|
|
|
0c1482 |
index a97bd3e..47c3019 100644
|
|
|
0c1482 |
--- a/linux_os/guide/system/software/sudo/sudoers_default_includedir/rule.yml
|
|
|
0c1482 |
+++ b/linux_os/guide/system/software/sudo/sudoers_default_includedir/rule.yml
|
|
|
0c1482 |
@@ -28,6 +28,7 @@ identifiers:
|
|
|
0c1482 |
references:
|
|
|
0c1482 |
disa: CCI-000366
|
|
|
0c1482 |
srg: SRG-OS-000480-GPOS-00227
|
|
|
0c1482 |
+ stigid@rhel7: RHEL-07-010339
|
|
|
0c1482 |
stigid@rhel8: RHEL-08-010379
|
|
|
0c1482 |
|
|
|
0c1482 |
ocil_clause: "the /etc/sudoers doesn't include /etc/sudores.d or includes other directories?"
|
|
|
0c1482 |
diff --git a/products/rhel7/profiles/stig.profile b/products/rhel7/profiles/stig.profile
|
|
|
0c1482 |
index f020bc0..06bc62e 100644
|
|
|
0c1482 |
--- a/products/rhel7/profiles/stig.profile
|
|
|
0c1482 |
+++ b/products/rhel7/profiles/stig.profile
|
|
|
0c1482 |
@@ -46,7 +46,7 @@ selections:
|
|
|
0c1482 |
- var_accounts_minimum_age_login_defs=1
|
|
|
0c1482 |
- var_password_pam_maxrepeat=3
|
|
|
0c1482 |
- var_accounts_maximum_age_login_defs=60
|
|
|
0c1482 |
- - var_account_disable_post_pw_expiration=0
|
|
|
0c1482 |
+ - var_account_disable_post_pw_expiration=35
|
|
|
0c1482 |
- var_removable_partition=dev_cdrom
|
|
|
0c1482 |
- var_auditd_action_mail_acct=root
|
|
|
0c1482 |
- var_auditd_space_left_action=email
|
|
|
0c1482 |
@@ -56,7 +56,7 @@ selections:
|
|
|
0c1482 |
- var_accounts_max_concurrent_login_sessions=10
|
|
|
0c1482 |
- var_accounts_tmout=15_min
|
|
|
0c1482 |
- var_accounts_authorized_local_users_regex=rhel7
|
|
|
0c1482 |
- - var_time_service_set_maxpoll=system_default
|
|
|
0c1482 |
+ - var_time_service_set_maxpoll=18_hours
|
|
|
0c1482 |
- sysctl_net_ipv4_conf_all_accept_source_route_value=disabled
|
|
|
0c1482 |
- sysctl_net_ipv4_conf_default_accept_source_route_value=disabled
|
|
|
0c1482 |
- sysctl_net_ipv4_icmp_echo_ignore_broadcasts_value=enabled
|
|
|
0c1482 |
@@ -326,3 +326,5 @@ selections:
|
|
|
0c1482 |
- auditd_overflow_action
|
|
|
0c1482 |
- auditd_name_format
|
|
|
0c1482 |
- sebool_ssh_sysadm_login
|
|
|
0c1482 |
+ - sudoers_default_includedir
|
|
|
0c1482 |
+ - package_aide_installed
|