Blame SOURCES/scap-security-guide-0.1.61-rhel8_stig_audit_rules-PR_8174.patch

38a2c0
diff --git a/linux_os/guide/system/auditing/auditd_configure_rules/audit_dac_actions/audit_rules_dac_modification_fchmod/rule.yml b/linux_os/guide/system/auditing/auditd_configure_rules/audit_dac_actions/audit_rules_dac_modification_fchmod/rule.yml
38a2c0
index a0b3efcbf79..1bc7afbb224 100644
38a2c0
--- a/linux_os/guide/system/auditing/auditd_configure_rules/audit_dac_actions/audit_rules_dac_modification_fchmod/rule.yml
38a2c0
+++ b/linux_os/guide/system/auditing/auditd_configure_rules/audit_dac_actions/audit_rules_dac_modification_fchmod/rule.yml
38a2c0
@@ -58,7 +58,7 @@ references:
38a2c0
     stigid@ol7: OL07-00-030410
38a2c0
     stigid@ol8: OL08-00-030540
38a2c0
     stigid@rhel7: RHEL-07-030420
38a2c0
-    stigid@rhel8: RHEL-08-030540
38a2c0
+    stigid@rhel8: RHEL-08-030490
38a2c0
     stigid@sle12: SLES-12-020470
38a2c0
     stigid@sle15: SLES-15-030300
38a2c0
     stigid@ubuntu2004: UBTU-20-010153
38a2c0
diff --git a/linux_os/guide/system/auditing/auditd_configure_rules/audit_dac_actions/audit_rules_dac_modification_fchmodat/rule.yml b/linux_os/guide/system/auditing/auditd_configure_rules/audit_dac_actions/audit_rules_dac_modification_fchmodat/rule.yml
38a2c0
index 83dd57f2b6d..dc8211684f2 100644
38a2c0
--- a/linux_os/guide/system/auditing/auditd_configure_rules/audit_dac_actions/audit_rules_dac_modification_fchmodat/rule.yml
38a2c0
+++ b/linux_os/guide/system/auditing/auditd_configure_rules/audit_dac_actions/audit_rules_dac_modification_fchmodat/rule.yml
38a2c0
@@ -58,7 +58,7 @@ references:
38a2c0
     stigid@ol7: OL07-00-030410
38a2c0
     stigid@ol8: OL08-00-030530
38a2c0
     stigid@rhel7: RHEL-07-030430
38a2c0
-    stigid@rhel8: RHEL-08-030530
38a2c0
+    stigid@rhel8: RHEL-08-030490
38a2c0
     stigid@sle12: SLES-12-020480
38a2c0
     stigid@sle15: SLES-15-030310
38a2c0
     stigid@ubuntu2004: UBTU-20-010154
38a2c0
diff --git a/linux_os/guide/system/auditing/auditd_configure_rules/audit_dac_actions/audit_rules_dac_modification_fchown/rule.yml b/linux_os/guide/system/auditing/auditd_configure_rules/audit_dac_actions/audit_rules_dac_modification_fchown/rule.yml
38a2c0
index 1b78aab4a1a..07592bb2fd9 100644
38a2c0
--- a/linux_os/guide/system/auditing/auditd_configure_rules/audit_dac_actions/audit_rules_dac_modification_fchown/rule.yml
38a2c0
+++ b/linux_os/guide/system/auditing/auditd_configure_rules/audit_dac_actions/audit_rules_dac_modification_fchown/rule.yml
38a2c0
@@ -61,7 +61,7 @@ references:
38a2c0
     stigid@ol7: OL07-00-030370
38a2c0
     stigid@ol8: OL08-00-030520
38a2c0
     stigid@rhel7: RHEL-07-030380
38a2c0
-    stigid@rhel8: RHEL-08-030520
38a2c0
+    stigid@rhel8: RHEL-08-030480
38a2c0
     stigid@sle12: SLES-12-020430
38a2c0
     stigid@sle15: SLES-15-030260
38a2c0
     stigid@ubuntu2004: UBTU-20-010149
38a2c0
diff --git a/linux_os/guide/system/auditing/auditd_configure_rules/audit_dac_actions/audit_rules_dac_modification_fchownat/rule.yml b/linux_os/guide/system/auditing/auditd_configure_rules/audit_dac_actions/audit_rules_dac_modification_fchownat/rule.yml
38a2c0
index 360c60de06d..084970765b2 100644
38a2c0
--- a/linux_os/guide/system/auditing/auditd_configure_rules/audit_dac_actions/audit_rules_dac_modification_fchownat/rule.yml
38a2c0
+++ b/linux_os/guide/system/auditing/auditd_configure_rules/audit_dac_actions/audit_rules_dac_modification_fchownat/rule.yml
38a2c0
@@ -58,7 +58,7 @@ references:
38a2c0
     stigid@ol7: OL07-00-030370
38a2c0
     stigid@ol8: OL08-00-030510
38a2c0
     stigid@rhel7: RHEL-07-030400
38a2c0
-    stigid@rhel8: RHEL-08-030510
38a2c0
+    stigid@rhel8: RHEL-08-030480
38a2c0
     stigid@sle12: SLES-12-020450
38a2c0
     stigid@sle15: SLES-15-030280
38a2c0
     stigid@ubuntu2004: UBTU-20-010150
38a2c0
diff --git a/linux_os/guide/system/auditing/auditd_configure_rules/audit_dac_actions/audit_rules_dac_modification_fremovexattr/rule.yml b/linux_os/guide/system/auditing/auditd_configure_rules/audit_dac_actions/audit_rules_dac_modification_fremovexattr/rule.yml
38a2c0
index 19bf8a5b981..5695440ad7d 100644
38a2c0
--- a/linux_os/guide/system/auditing/auditd_configure_rules/audit_dac_actions/audit_rules_dac_modification_fremovexattr/rule.yml
38a2c0
+++ b/linux_os/guide/system/auditing/auditd_configure_rules/audit_dac_actions/audit_rules_dac_modification_fremovexattr/rule.yml
38a2c0
@@ -75,7 +75,7 @@ references:
38a2c0
     stigid@ol7: OL07-00-030440
38a2c0
     stigid@ol8: OL08-00-030240
38a2c0
     stigid@rhel7: RHEL-07-030480
38a2c0
-    stigid@rhel8: RHEL-08-030240
38a2c0
+    stigid@rhel8: RHEL-08-030200
38a2c0
     stigid@sle12: SLES-12-020410
38a2c0
     stigid@sle15: SLES-15-030210
38a2c0
     stigid@ubuntu2004: UBTU-20-010147
38a2c0
diff --git a/linux_os/guide/system/auditing/auditd_configure_rules/audit_dac_actions/audit_rules_dac_modification_fsetxattr/rule.yml b/linux_os/guide/system/auditing/auditd_configure_rules/audit_dac_actions/audit_rules_dac_modification_fsetxattr/rule.yml
38a2c0
index 40cd114042e..ab536a8ae0a 100644
38a2c0
--- a/linux_os/guide/system/auditing/auditd_configure_rules/audit_dac_actions/audit_rules_dac_modification_fsetxattr/rule.yml
38a2c0
+++ b/linux_os/guide/system/auditing/auditd_configure_rules/audit_dac_actions/audit_rules_dac_modification_fsetxattr/rule.yml
38a2c0
@@ -70,7 +70,7 @@ references:
38a2c0
     stigid@ol7: OL07-00-030440
38a2c0
     stigid@ol8: OL08-00-030230
38a2c0
     stigid@rhel7: RHEL-07-030450
38a2c0
-    stigid@rhel8: RHEL-08-030230
38a2c0
+    stigid@rhel8: RHEL-08-030200
38a2c0
     stigid@sle12: SLES-12-020380
38a2c0
     stigid@sle15: SLES-15-030230
38a2c0
     stigid@ubuntu2004: UBTU-20-010144
38a2c0
diff --git a/linux_os/guide/system/auditing/auditd_configure_rules/audit_dac_actions/audit_rules_dac_modification_lchown/rule.yml b/linux_os/guide/system/auditing/auditd_configure_rules/audit_dac_actions/audit_rules_dac_modification_lchown/rule.yml
38a2c0
index 81dddd9fb71..d1f4ee35ccb 100644
38a2c0
--- a/linux_os/guide/system/auditing/auditd_configure_rules/audit_dac_actions/audit_rules_dac_modification_lchown/rule.yml
38a2c0
+++ b/linux_os/guide/system/auditing/auditd_configure_rules/audit_dac_actions/audit_rules_dac_modification_lchown/rule.yml
38a2c0
@@ -58,7 +58,7 @@ references:
38a2c0
     stigid@ol7: OL07-00-030370
38a2c0
     stigid@ol8: OL08-00-030500
38a2c0
     stigid@rhel7: RHEL-07-030390
38a2c0
-    stigid@rhel8: RHEL-08-030500
38a2c0
+    stigid@rhel8: RHEL-08-030480
38a2c0
     stigid@sle12: SLES-12-020440
38a2c0
     stigid@sle15: SLES-15-030270
38a2c0
     stigid@ubuntu2004: UBTU-20-010151
38a2c0
diff --git a/linux_os/guide/system/auditing/auditd_configure_rules/audit_dac_actions/audit_rules_dac_modification_lsetxattr/rule.yml b/linux_os/guide/system/auditing/auditd_configure_rules/audit_dac_actions/audit_rules_dac_modification_lsetxattr/rule.yml
38a2c0
index fa15012b05f..a2425e373bc 100644
38a2c0
--- a/linux_os/guide/system/auditing/auditd_configure_rules/audit_dac_actions/audit_rules_dac_modification_lsetxattr/rule.yml
38a2c0
+++ b/linux_os/guide/system/auditing/auditd_configure_rules/audit_dac_actions/audit_rules_dac_modification_lsetxattr/rule.yml
38a2c0
@@ -69,7 +69,7 @@ references:
38a2c0
     stigid@ol7: OL07-00-030440
38a2c0
     stigid@ol8: OL08-00-030220
38a2c0
     stigid@rhel7: RHEL-07-030460
38a2c0
-    stigid@rhel8: RHEL-08-030220
38a2c0
+    stigid@rhel8: RHEL-08-030200
38a2c0
     stigid@sle15: SLES-15-030240
38a2c0
     stigid@ubuntu2004: UBTU-20-010143
38a2c0
     vmmsrg: SRG-OS-000458-VMM-001810,SRG-OS-000474-VMM-001940
38a2c0
diff --git a/linux_os/guide/system/auditing/auditd_configure_rules/audit_dac_actions/audit_rules_dac_modification_removexattr/rule.yml b/linux_os/guide/system/auditing/auditd_configure_rules/audit_dac_actions/audit_rules_dac_modification_removexattr/rule.yml
38a2c0
index 6d15eecee2c..0be27fbe860 100644
38a2c0
--- a/linux_os/guide/system/auditing/auditd_configure_rules/audit_dac_actions/audit_rules_dac_modification_removexattr/rule.yml
38a2c0
+++ b/linux_os/guide/system/auditing/auditd_configure_rules/audit_dac_actions/audit_rules_dac_modification_removexattr/rule.yml
38a2c0
@@ -74,7 +74,7 @@ references:
38a2c0
     stigid@ol7: OL07-00-030440
38a2c0
     stigid@ol8: OL08-00-030210
38a2c0
     stigid@rhel7: RHEL-07-030470
38a2c0
-    stigid@rhel8: RHEL-08-030210
38a2c0
+    stigid@rhel8: RHEL-08-030200
38a2c0
     stigid@sle12: SLES-12-020390
38a2c0
     stigid@sle15: SLES-15-030190
38a2c0
     stigid@ubuntu2004: UBTU-20-010145
38a2c0
diff --git a/linux_os/guide/system/auditing/auditd_configure_rules/audit_dac_actions/audit_rules_dac_modification_setxattr/rule.yml b/linux_os/guide/system/auditing/auditd_configure_rules/audit_dac_actions/audit_rules_dac_modification_setxattr/rule.yml
38a2c0
index 6f7cea26e16..5dc13a0a43a 100644
38a2c0
--- a/linux_os/guide/system/auditing/auditd_configure_rules/audit_dac_actions/audit_rules_dac_modification_setxattr/rule.yml
38a2c0
+++ b/linux_os/guide/system/auditing/auditd_configure_rules/audit_dac_actions/audit_rules_dac_modification_setxattr/rule.yml
38a2c0
@@ -70,7 +70,7 @@ references:
38a2c0
     stigid@ol7: OL07-00-030440
38a2c0
     stigid@ol8: OL08-00-030270
38a2c0
     stigid@rhel7: RHEL-07-030440
38a2c0
-    stigid@rhel8: RHEL-08-030270
38a2c0
+    stigid@rhel8: RHEL-08-030200
38a2c0
     stigid@sle12: SLES-12-020370
38a2c0
     stigid@sle15: SLES-15-030220
38a2c0
     stigid@ubuntu2004: UBTU-20-010142
38a2c0
diff --git a/linux_os/guide/system/auditing/auditd_configure_rules/audit_file_deletion_events/audit_rules_file_deletion_events_renameat/rule.yml b/linux_os/guide/system/auditing/auditd_configure_rules/audit_file_deletion_events/audit_rules_file_deletion_events_renameat/rule.yml
38a2c0
index 718dcb8a9d9..120d6fa84d3 100644
38a2c0
--- a/linux_os/guide/system/auditing/auditd_configure_rules/audit_file_deletion_events/audit_rules_file_deletion_events_renameat/rule.yml
38a2c0
+++ b/linux_os/guide/system/auditing/auditd_configure_rules/audit_file_deletion_events/audit_rules_file_deletion_events_renameat/rule.yml
38a2c0
@@ -52,7 +52,7 @@ references:
38a2c0
     stigid@ol7: OL07-00-030910
38a2c0
     stigid@ol8: OL08-00-030362
38a2c0
     stigid@rhel7: RHEL-07-030890
38a2c0
-    stigid@rhel8: RHEL-08-030362
38a2c0
+    stigid@rhel8: RHEL-08-030361
38a2c0
     stigid@ubuntu2004: UBTU-20-010270
38a2c0
     vmmsrg: SRG-OS-000466-VMM-001870,SRG-OS-000468-VMM-001890
38a2c0
 
38a2c0
diff --git a/linux_os/guide/system/auditing/auditd_configure_rules/audit_file_deletion_events/audit_rules_file_deletion_events_rmdir/rule.yml b/linux_os/guide/system/auditing/auditd_configure_rules/audit_file_deletion_events/audit_rules_file_deletion_events_rmdir/rule.yml
38a2c0
index 643f075f46a..4caa7c66986 100644
38a2c0
--- a/linux_os/guide/system/auditing/auditd_configure_rules/audit_file_deletion_events/audit_rules_file_deletion_events_rmdir/rule.yml
38a2c0
+++ b/linux_os/guide/system/auditing/auditd_configure_rules/audit_file_deletion_events/audit_rules_file_deletion_events_rmdir/rule.yml
38a2c0
@@ -49,7 +49,7 @@ references:
38a2c0
     stigid@ol7: OL07-00-030910
38a2c0
     stigid@ol8: OL08-00-030363
38a2c0
     stigid@rhel7: RHEL-07-030900
38a2c0
-    stigid@rhel8: RHEL-08-030363
38a2c0
+    stigid@rhel8: RHEL-08-030361
38a2c0
     vmmsrg: SRG-OS-000466-VMM-001870,SRG-OS-000468-VMM-001890
38a2c0
 
38a2c0
 {{{ complete_ocil_entry_audit_syscall(syscall="rmdir") }}}
38a2c0
diff --git a/linux_os/guide/system/auditing/auditd_configure_rules/audit_file_deletion_events/audit_rules_file_deletion_events_unlink/rule.yml b/linux_os/guide/system/auditing/auditd_configure_rules/audit_file_deletion_events/audit_rules_file_deletion_events_unlink/rule.yml
38a2c0
index 9cf3c4668bc..8fea9dc4582 100644
38a2c0
--- a/linux_os/guide/system/auditing/auditd_configure_rules/audit_file_deletion_events/audit_rules_file_deletion_events_unlink/rule.yml
38a2c0
+++ b/linux_os/guide/system/auditing/auditd_configure_rules/audit_file_deletion_events/audit_rules_file_deletion_events_unlink/rule.yml
38a2c0
@@ -52,7 +52,7 @@ references:
38a2c0
     stigid@ol7: OL07-00-030910
38a2c0
     stigid@ol8: OL08-00-030364
38a2c0
     stigid@rhel7: RHEL-07-030910
38a2c0
-    stigid@rhel8: RHEL-08-030364
38a2c0
+    stigid@rhel8: RHEL-08-030361
38a2c0
     stigid@ubuntu2004: UBTU-20-010267
38a2c0
     vmmsrg: SRG-OS-000466-VMM-001870,SRG-OS-000468-VMM-001890
38a2c0
 
38a2c0
diff --git a/linux_os/guide/system/auditing/auditd_configure_rules/audit_file_deletion_events/audit_rules_file_deletion_events_unlinkat/rule.yml b/linux_os/guide/system/auditing/auditd_configure_rules/audit_file_deletion_events/audit_rules_file_deletion_events_unlinkat/rule.yml
38a2c0
index d0ebbdbd723..bee18e99b52 100644
38a2c0
--- a/linux_os/guide/system/auditing/auditd_configure_rules/audit_file_deletion_events/audit_rules_file_deletion_events_unlinkat/rule.yml
38a2c0
+++ b/linux_os/guide/system/auditing/auditd_configure_rules/audit_file_deletion_events/audit_rules_file_deletion_events_unlinkat/rule.yml
38a2c0
@@ -52,7 +52,7 @@ references:
38a2c0
     stigid@ol7: OL07-00-030910
38a2c0
     stigid@ol8: OL08-00-030365
38a2c0
     stigid@rhel7: RHEL-07-030920
38a2c0
-    stigid@rhel8: RHEL-08-030365
38a2c0
+    stigid@rhel8: RHEL-08-030361
38a2c0
     stigid@ubuntu2004: UBTU-20-010268
38a2c0
     vmmsrg: SRG-OS-000466-VMM-001870,SRG-OS-000468-VMM-001890
38a2c0
 
38a2c0
diff --git a/linux_os/guide/system/auditing/auditd_configure_rules/audit_file_modification/audit_rules_unsuccessful_file_modification_creat/rule.yml b/linux_os/guide/system/auditing/auditd_configure_rules/audit_file_modification/audit_rules_unsuccessful_file_modification_creat/rule.yml
38a2c0
index 373b12525e1..736c6643b57 100644
38a2c0
--- a/linux_os/guide/system/auditing/auditd_configure_rules/audit_file_modification/audit_rules_unsuccessful_file_modification_creat/rule.yml
38a2c0
+++ b/linux_os/guide/system/auditing/auditd_configure_rules/audit_file_modification/audit_rules_unsuccessful_file_modification_creat/rule.yml
38a2c0
@@ -63,7 +63,7 @@ references:
38a2c0
     stigid@ol7: OL07-00-030510
38a2c0
     stigid@ol8: OL08-00-030470
38a2c0
     stigid@rhel7: RHEL-07-030500
38a2c0
-    stigid@rhel8: RHEL-08-030470
38a2c0
+    stigid@rhel8: RHEL-08-030420
38a2c0
     stigid@sle12: SLES-12-020520
38a2c0
     stigid@sle15: SLES-15-030160
38a2c0
     stigid@ubuntu2004: UBTU-20-010158
38a2c0
diff --git a/linux_os/guide/system/auditing/auditd_configure_rules/audit_file_modification/audit_rules_unsuccessful_file_modification_ftruncate/rule.yml b/linux_os/guide/system/auditing/auditd_configure_rules/audit_file_modification/audit_rules_unsuccessful_file_modification_ftruncate/rule.yml
38a2c0
index 2b2d82a736b..6b4176d53e3 100644
38a2c0
--- a/linux_os/guide/system/auditing/auditd_configure_rules/audit_file_modification/audit_rules_unsuccessful_file_modification_ftruncate/rule.yml
38a2c0
+++ b/linux_os/guide/system/auditing/auditd_configure_rules/audit_file_modification/audit_rules_unsuccessful_file_modification_ftruncate/rule.yml
38a2c0
@@ -66,7 +66,7 @@ references:
38a2c0
     stigid@ol7: OL07-00-030510
38a2c0
     stigid@ol8: OL08-00-030460
38a2c0
     stigid@rhel7: RHEL-07-030550
38a2c0
-    stigid@rhel8: RHEL-08-030460
38a2c0
+    stigid@rhel8: RHEL-08-030420
38a2c0
     stigid@sle12: SLES-12-020510
38a2c0
     stigid@sle15: SLES-15-030320
38a2c0
     stigid@ubuntu2004: UBTU-20-010157
38a2c0
diff --git a/linux_os/guide/system/auditing/auditd_configure_rules/audit_file_modification/audit_rules_unsuccessful_file_modification_open/rule.yml b/linux_os/guide/system/auditing/auditd_configure_rules/audit_file_modification/audit_rules_unsuccessful_file_modification_open/rule.yml
38a2c0
index dcb3d0f0525..90d45b6787e 100644
38a2c0
--- a/linux_os/guide/system/auditing/auditd_configure_rules/audit_file_modification/audit_rules_unsuccessful_file_modification_open/rule.yml
38a2c0
+++ b/linux_os/guide/system/auditing/auditd_configure_rules/audit_file_modification/audit_rules_unsuccessful_file_modification_open/rule.yml
38a2c0
@@ -66,7 +66,7 @@ references:
38a2c0
     stigid@ol7: OL07-00-030510
38a2c0
     stigid@ol8: OL08-00-030440
38a2c0
     stigid@rhel7: RHEL-07-030510
38a2c0
-    stigid@rhel8: RHEL-08-030440
38a2c0
+    stigid@rhel8: RHEL-08-030420
38a2c0
     stigid@sle12: SLES-12-020490
38a2c0
     stigid@sle15: SLES-15-030150
38a2c0
     stigid@ubuntu2004: UBTU-20-010155
38a2c0
diff --git a/linux_os/guide/system/auditing/auditd_configure_rules/audit_file_modification/audit_rules_unsuccessful_file_modification_open_by_handle_at/rule.yml b/linux_os/guide/system/auditing/auditd_configure_rules/audit_file_modification/audit_rules_unsuccessful_file_modification_open_by_handle_at/rule.yml
38a2c0
index e68d892bb90..6df936e489c 100644
38a2c0
--- a/linux_os/guide/system/auditing/auditd_configure_rules/audit_file_modification/audit_rules_unsuccessful_file_modification_open_by_handle_at/rule.yml
38a2c0
+++ b/linux_os/guide/system/auditing/auditd_configure_rules/audit_file_modification/audit_rules_unsuccessful_file_modification_open_by_handle_at/rule.yml
38a2c0
@@ -60,7 +60,7 @@ references:
38a2c0
     stigid@ol7: OL07-00-030510
38a2c0
     stigid@ol8: OL08-00-030450
38a2c0
     stigid@rhel7: RHEL-07-030530
38a2c0
-    stigid@rhel8: RHEL-08-030450
38a2c0
+    stigid@rhel8: RHEL-08-030420
38a2c0
     stigid@sle12: SLES-12-020540
38a2c0
     stigid@sle15: SLES-15-030180
38a2c0
     stigid@ubuntu2004: UBTU-20-010160
38a2c0
diff --git a/linux_os/guide/system/auditing/auditd_configure_rules/audit_file_modification/audit_rules_unsuccessful_file_modification_openat/rule.yml b/linux_os/guide/system/auditing/auditd_configure_rules/audit_file_modification/audit_rules_unsuccessful_file_modification_openat/rule.yml
38a2c0
index cd6bd545e71..1b6ae818e48 100644
38a2c0
--- a/linux_os/guide/system/auditing/auditd_configure_rules/audit_file_modification/audit_rules_unsuccessful_file_modification_openat/rule.yml
38a2c0
+++ b/linux_os/guide/system/auditing/auditd_configure_rules/audit_file_modification/audit_rules_unsuccessful_file_modification_openat/rule.yml
38a2c0
@@ -66,7 +66,7 @@ references:
38a2c0
     stigid@ol7: OL07-00-030510
38a2c0
     stigid@ol8: OL08-00-030430
38a2c0
     stigid@rhel7: RHEL-07-030520
38a2c0
-    stigid@rhel8: RHEL-08-030430
38a2c0
+    stigid@rhel8: RHEL-08-030420
38a2c0
     stigid@sle12: SLES-12-020530
38a2c0
     stigid@sle15: SLES-15-030170
38a2c0
     stigid@ubuntu2004: UBTU-20-010159
38a2c0
diff --git a/linux_os/guide/system/auditing/auditd_configure_rules/audit_kernel_module_loading/audit_rules_kernel_module_loading_finit/rule.yml b/linux_os/guide/system/auditing/auditd_configure_rules/audit_kernel_module_loading/audit_rules_kernel_module_loading_finit/rule.yml
38a2c0
index 50e5b4e4f02..2f1c6d0bf22 100644
38a2c0
--- a/linux_os/guide/system/auditing/auditd_configure_rules/audit_kernel_module_loading/audit_rules_kernel_module_loading_finit/rule.yml
38a2c0
+++ b/linux_os/guide/system/auditing/auditd_configure_rules/audit_kernel_module_loading/audit_rules_kernel_module_loading_finit/rule.yml
38a2c0
@@ -51,7 +51,7 @@ references:
38a2c0
     stigid@ol7: OL07-00-030820
38a2c0
     stigid@ol8: OL08-00-030380
38a2c0
     stigid@rhel7: RHEL-07-030821
38a2c0
-    stigid@rhel8: RHEL-08-030380
38a2c0
+    stigid@rhel8: RHEL-08-030360
38a2c0
     stigid@sle12: SLES-12-020740
38a2c0
     stigid@sle15: SLES-15-030530
38a2c0
     stigid@ubuntu2004: UBTU-20-010180
38a2c0
diff --git a/products/rhel8/profiles/stig.profile b/products/rhel8/profiles/stig.profile
38a2c0
index ffca983d0bd..d92bc72971c 100644
38a2c0
--- a/products/rhel8/profiles/stig.profile
38a2c0
+++ b/products/rhel8/profiles/stig.profile
38a2c0
@@ -560,6 +560,8 @@ selections:
38a2c0
 
38a2c0
     # RHEL-08-020220
38a2c0
     - accounts_password_pam_pwhistory_remember_system_auth
38a2c0
+
38a2c0
+    # RHEL-08-020221
38a2c0
     - accounts_password_pam_pwhistory_remember_password_auth
38a2c0
 
38a2c0
     # RHEL-08-020230
38a2c0
@@ -712,18 +714,11 @@ selections:
38a2c0
 
38a2c0
     # RHEL-08-030200
38a2c0
     - audit_rules_dac_modification_lremovexattr
38a2c0
-
38a2c0
-    # RHEL-08-030210
38a2c0
     - audit_rules_dac_modification_removexattr
38a2c0
-
38a2c0
-    # RHEL-08-030220
38a2c0
     - audit_rules_dac_modification_lsetxattr
38a2c0
-
38a2c0
-    # RHEL-08-030230
38a2c0
     - audit_rules_dac_modification_fsetxattr
38a2c0
-
38a2c0
-    # RHEL-08-030240
38a2c0
     - audit_rules_dac_modification_fremovexattr
38a2c0
+    - audit_rules_dac_modification_setxattr
38a2c0
 
38a2c0
     # RHEL-08-030250
38a2c0
     - audit_rules_privileged_commands_chage
38a2c0
@@ -731,8 +726,6 @@ selections:
38a2c0
     # RHEL-08-030260
38a2c0
     - audit_rules_execution_chcon
38a2c0
 
38a2c0
-    # RHEL-08-030270
38a2c0
-    - audit_rules_dac_modification_setxattr
38a2c0
 
38a2c0
     # RHEL-08-030280
38a2c0
     - audit_rules_privileged_commands_ssh_agent
38a2c0
@@ -787,28 +780,18 @@ selections:
38a2c0
 
38a2c0
     # RHEL-08-030360
38a2c0
     - audit_rules_kernel_module_loading_init
38a2c0
+    - audit_rules_kernel_module_loading_finit
38a2c0
 
38a2c0
     # RHEL-08-030361
38a2c0
     - audit_rules_file_deletion_events_rename
38a2c0
-
38a2c0
-    # RHEL-08-030362
38a2c0
     - audit_rules_file_deletion_events_renameat
38a2c0
-
38a2c0
-    # RHEL-08-030363
38a2c0
     - audit_rules_file_deletion_events_rmdir
38a2c0
-
38a2c0
-    # RHEL-08-030364
38a2c0
     - audit_rules_file_deletion_events_unlink
38a2c0
-
38a2c0
-    # RHEL-08-030365
38a2c0
     - audit_rules_file_deletion_events_unlinkat
38a2c0
 
38a2c0
     # RHEL-08-030370
38a2c0
     - audit_rules_privileged_commands_gpasswd
38a2c0
 
38a2c0
-    # RHEL-08-030380
38a2c0
-    - audit_rules_kernel_module_loading_finit
38a2c0
-
38a2c0
     # RHEL-08-030390
38a2c0
     - audit_rules_kernel_module_loading_delete
38a2c0
 
38a2c0
@@ -820,41 +803,21 @@ selections:
38a2c0
 
38a2c0
     # RHEL-08-030420
38a2c0
     - audit_rules_unsuccessful_file_modification_truncate
38a2c0
-
38a2c0
-    # RHEL-08-030430
38a2c0
     - audit_rules_unsuccessful_file_modification_openat
38a2c0
-
38a2c0
-    # RHEL-08-030440
38a2c0
     - audit_rules_unsuccessful_file_modification_open
38a2c0
-
38a2c0
-    # RHEL-08-030450
38a2c0
     - audit_rules_unsuccessful_file_modification_open_by_handle_at
38a2c0
-
38a2c0
-    # RHEL-08-030460
38a2c0
     - audit_rules_unsuccessful_file_modification_ftruncate
38a2c0
-
38a2c0
-    # RHEL-08-030470
38a2c0
     - audit_rules_unsuccessful_file_modification_creat
38a2c0
 
38a2c0
     # RHEL-08-030480
38a2c0
     - audit_rules_dac_modification_chown
38a2c0
-
38a2c0
-    # RHEL-08-030490
38a2c0
-    - audit_rules_dac_modification_chmod
38a2c0
-
38a2c0
-    # RHEL-08-030500
38a2c0
     - audit_rules_dac_modification_lchown
38a2c0
-
38a2c0
-    # RHEL-08-030510
38a2c0
     - audit_rules_dac_modification_fchownat
38a2c0
-
38a2c0
-    # RHEL-08-030520
38a2c0
     - audit_rules_dac_modification_fchown
38a2c0
 
38a2c0
-    # RHEL-08-030530
38a2c0
+    # RHEL-08-030490
38a2c0
+    - audit_rules_dac_modification_chmod
38a2c0
     - audit_rules_dac_modification_fchmodat
38a2c0
-
38a2c0
-    # RHEL-08-030540
38a2c0
     - audit_rules_dac_modification_fchmod
38a2c0
 
38a2c0
     # RHEL-08-030550
38a2c0
diff --git a/products/rhel9/profiles/stig.profile b/products/rhel9/profiles/stig.profile
38a2c0
index eb2cac913bd..42c6d0e9aca 100644
38a2c0
--- a/products/rhel9/profiles/stig.profile
38a2c0
+++ b/products/rhel9/profiles/stig.profile
38a2c0
@@ -561,6 +561,8 @@ selections:
38a2c0
 
38a2c0
     # RHEL-08-020220
38a2c0
     - accounts_password_pam_pwhistory_remember_system_auth
38a2c0
+
38a2c0
+    # RHEL-08-020221
38a2c0
     - accounts_password_pam_pwhistory_remember_password_auth
38a2c0
 
38a2c0
     # RHEL-08-020230
38a2c0
@@ -713,18 +715,11 @@ selections:
38a2c0
 
38a2c0
     # RHEL-08-030200
38a2c0
     - audit_rules_dac_modification_lremovexattr
38a2c0
-
38a2c0
-    # RHEL-08-030210
38a2c0
     - audit_rules_dac_modification_removexattr
38a2c0
-
38a2c0
-    # RHEL-08-030220
38a2c0
     - audit_rules_dac_modification_lsetxattr
38a2c0
-
38a2c0
-    # RHEL-08-030230
38a2c0
     - audit_rules_dac_modification_fsetxattr
38a2c0
-
38a2c0
-    # RHEL-08-030240
38a2c0
     - audit_rules_dac_modification_fremovexattr
38a2c0
+    - audit_rules_dac_modification_setxattr
38a2c0
 
38a2c0
     # RHEL-08-030250
38a2c0
     - audit_rules_privileged_commands_chage
38a2c0
@@ -732,9 +727,6 @@ selections:
38a2c0
     # RHEL-08-030260
38a2c0
     - audit_rules_execution_chcon
38a2c0
 
38a2c0
-    # RHEL-08-030270
38a2c0
-    - audit_rules_dac_modification_setxattr
38a2c0
-
38a2c0
     # RHEL-08-030280
38a2c0
     - audit_rules_privileged_commands_ssh_agent
38a2c0
 
38a2c0
@@ -788,28 +780,18 @@ selections:
38a2c0
 
38a2c0
     # RHEL-08-030360
38a2c0
     - audit_rules_kernel_module_loading_init
38a2c0
+    - audit_rules_kernel_module_loading_finit
38a2c0
 
38a2c0
     # RHEL-08-030361
38a2c0
     - audit_rules_file_deletion_events_rename
38a2c0
-
38a2c0
-    # RHEL-08-030362
38a2c0
     - audit_rules_file_deletion_events_renameat
38a2c0
-
38a2c0
-    # RHEL-08-030363
38a2c0
     - audit_rules_file_deletion_events_rmdir
38a2c0
-
38a2c0
-    # RHEL-08-030364
38a2c0
     - audit_rules_file_deletion_events_unlink
38a2c0
-
38a2c0
-    # RHEL-08-030365
38a2c0
     - audit_rules_file_deletion_events_unlinkat
38a2c0
 
38a2c0
     # RHEL-08-030370
38a2c0
     - audit_rules_privileged_commands_gpasswd
38a2c0
 
38a2c0
-    # RHEL-08-030380
38a2c0
-    - audit_rules_kernel_module_loading_finit
38a2c0
-
38a2c0
     # RHEL-08-030390
38a2c0
     - audit_rules_kernel_module_loading_delete
38a2c0
 
38a2c0
@@ -821,41 +803,21 @@ selections:
38a2c0
 
38a2c0
     # RHEL-08-030420
38a2c0
     - audit_rules_unsuccessful_file_modification_truncate
38a2c0
-
38a2c0
-    # RHEL-08-030430
38a2c0
     - audit_rules_unsuccessful_file_modification_openat
38a2c0
-
38a2c0
-    # RHEL-08-030440
38a2c0
     - audit_rules_unsuccessful_file_modification_open
38a2c0
-
38a2c0
-    # RHEL-08-030450
38a2c0
     - audit_rules_unsuccessful_file_modification_open_by_handle_at
38a2c0
-
38a2c0
-    # RHEL-08-030460
38a2c0
     - audit_rules_unsuccessful_file_modification_ftruncate
38a2c0
-
38a2c0
-    # RHEL-08-030470
38a2c0
     - audit_rules_unsuccessful_file_modification_creat
38a2c0
 
38a2c0
     # RHEL-08-030480
38a2c0
     - audit_rules_dac_modification_chown
38a2c0
-
38a2c0
-    # RHEL-08-030490
38a2c0
-    - audit_rules_dac_modification_chmod
38a2c0
-
38a2c0
-    # RHEL-08-030500
38a2c0
     - audit_rules_dac_modification_lchown
38a2c0
-
38a2c0
-    # RHEL-08-030510
38a2c0
     - audit_rules_dac_modification_fchownat
38a2c0
-
38a2c0
-    # RHEL-08-030520
38a2c0
     - audit_rules_dac_modification_fchown
38a2c0
 
38a2c0
-    # RHEL-08-030530
38a2c0
+    # RHEL-08-030490
38a2c0
+    - audit_rules_dac_modification_chmod
38a2c0
     - audit_rules_dac_modification_fchmodat
38a2c0
-
38a2c0
-    # RHEL-08-030540
38a2c0
     - audit_rules_dac_modification_fchmod
38a2c0
 
38a2c0
     # RHEL-08-030550