|
 |
a8c580 |
From e768a31f2d30b0af9f36ceca8c674ed084b7c93e Mon Sep 17 00:00:00 2001
|
|
|
a8c580 |
From: Carlos Matos <cmatos@redhat.com>
|
|
|
a8c580 |
Date: Mon, 19 Apr 2021 13:07:04 -0400
|
|
|
a8c580 |
Subject: [PATCH 1/3] Creating new RHEL 7 STIG GUI profile
|
|
|
a8c580 |
|
|
|
a8c580 |
---
|
|
|
a8c580 |
rhel7/profiles/stig_gui.profile | 35 +++++++++++++++++++++++++++++++++
|
|
|
a8c580 |
1 file changed, 35 insertions(+)
|
|
|
a8c580 |
create mode 100644 rhel7/profiles/stig_gui.profile
|
|
|
a8c580 |
|
|
|
a8c580 |
diff --git a/rhel7/profiles/stig_gui.profile b/rhel7/profiles/stig_gui.profile
|
|
|
a8c580 |
new file mode 100644
|
|
|
a8c580 |
index 00000000000..5f64363d64b
|
|
|
a8c580 |
--- /dev/null
|
|
|
a8c580 |
+++ b/rhel7/profiles/stig_gui.profile
|
|
|
a8c580 |
@@ -0,0 +1,35 @@
|
|
|
a8c580 |
+documentation_complete: true
|
|
|
a8c580 |
+
|
|
|
a8c580 |
+metadata:
|
|
|
a8c580 |
+ version: V3R1
|
|
|
a8c580 |
+ SMEs:
|
|
|
a8c580 |
+ - carlosmmatos
|
|
|
a8c580 |
+
|
|
|
a8c580 |
+reference: https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux
|
|
|
a8c580 |
+
|
|
|
a8c580 |
+title: 'DISA STIG with GUI for Red Hat Enterprise Linux 7'
|
|
|
a8c580 |
+
|
|
|
a8c580 |
+description: |-
|
|
|
a8c580 |
+ This profile contains configuration checks that align to the
|
|
|
a8c580 |
+ DISA STIG with GUI for Red Hat Enterprise Linux V3R2.
|
|
|
a8c580 |
+
|
|
|
a8c580 |
+ In addition to being applicable to Red Hat Enterprise Linux 7, DISA recognizes this
|
|
|
a8c580 |
+ configuration baseline as applicable to the operating system tier of
|
|
|
a8c580 |
+ Red Hat technologies that are based on Red Hat Enterprise Linux 7, such as:
|
|
|
a8c580 |
+
|
|
|
a8c580 |
+ - Red Hat Enterprise Linux Server
|
|
|
a8c580 |
+ - Red Hat Enterprise Linux Workstation and Desktop
|
|
|
a8c580 |
+ - Red Hat Enterprise Linux for HPC
|
|
|
a8c580 |
+ - Red Hat Storage
|
|
|
a8c580 |
+ - Red Hat Containers with a Red Hat Enterprise Linux 7 image
|
|
|
a8c580 |
+
|
|
|
a8c580 |
+ Warning: The installation and use of a Graphical User Interface (GUI)
|
|
|
a8c580 |
+ increases your attack vector and decreases your overall security posture. If
|
|
|
a8c580 |
+ your Information Systems Security Officer (ISSO) lacks a documented operational
|
|
|
a8c580 |
+ requirement for a graphical user interface, please consider using the
|
|
|
a8c580 |
+ standard DISA STIG for Red Hat Enterprise Linux 7 profile.
|
|
|
a8c580 |
+
|
|
|
a8c580 |
+extends: stig
|
|
|
a8c580 |
+
|
|
|
a8c580 |
+selections:
|
|
|
a8c580 |
+ - '!xwindows_remove_packages'
|
|
|
a8c580 |
|
|
|
a8c580 |
From 04a2f7553cb95b34c1af28c93fabe945aa5fa0de Mon Sep 17 00:00:00 2001
|
|
|
a8c580 |
From: Carlos Matos <cmatos@redhat.com>
|
|
|
a8c580 |
Date: Tue, 20 Apr 2021 08:26:31 -0400
|
|
|
a8c580 |
Subject: [PATCH 2/3] Updated metadata version to V3R2
|
|
|
a8c580 |
|
|
|
a8c580 |
---
|
|
|
a8c580 |
rhel7/profiles/stig.profile | 2 +-
|
|
|
a8c580 |
1 file changed, 1 insertion(+), 1 deletion(-)
|
|
|
a8c580 |
|
|
|
a8c580 |
diff --git a/rhel7/profiles/stig.profile b/rhel7/profiles/stig.profile
|
|
|
a8c580 |
index 1ea19bc4d8a..192a0874d19 100644
|
|
|
a8c580 |
--- a/rhel7/profiles/stig.profile
|
|
|
a8c580 |
+++ b/rhel7/profiles/stig.profile
|
|
|
a8c580 |
@@ -1,7 +1,7 @@
|
|
|
a8c580 |
documentation_complete: true
|
|
|
a8c580 |
|
|
|
a8c580 |
metadata:
|
|
|
a8c580 |
- version: V3R1
|
|
|
a8c580 |
+ version: V3R2
|
|
|
a8c580 |
SMEs:
|
|
|
a8c580 |
- carlosmmatos
|
|
|
a8c580 |
|
|
|
a8c580 |
|
|
|
a8c580 |
From 28938e0655c4a3adac767f278317bb83dca162b0 Mon Sep 17 00:00:00 2001
|
|
|
a8c580 |
From: Carlos Matos <cmatos@redhat.com>
|
|
|
a8c580 |
Date: Wed, 21 Apr 2021 11:00:03 -0400
|
|
|
a8c580 |
Subject: [PATCH 3/3] Updated metadata version to V3R2 on stig_gui profile
|
|
|
a8c580 |
|
|
|
a8c580 |
---
|
|
|
a8c580 |
rhel7/profiles/stig_gui.profile | 2 +-
|
|
|
a8c580 |
1 file changed, 1 insertion(+), 1 deletion(-)
|
|
|
a8c580 |
|
|
|
a8c580 |
diff --git a/rhel7/profiles/stig_gui.profile b/rhel7/profiles/stig_gui.profile
|
|
|
a8c580 |
index 5f64363d64b..c15ea10fdae 100644
|
|
|
a8c580 |
--- a/rhel7/profiles/stig_gui.profile
|
|
|
a8c580 |
+++ b/rhel7/profiles/stig_gui.profile
|
|
|
a8c580 |
@@ -1,7 +1,7 @@
|
|
|
a8c580 |
documentation_complete: true
|
|
|
a8c580 |
|
|
|
a8c580 |
metadata:
|
|
|
a8c580 |
- version: V3R1
|
|
|
a8c580 |
+ version: V3R2
|
|
|
a8c580 |
SMEs:
|
|
|
a8c580 |
- carlosmmatos
|
|
|
a8c580 |
|