From e768a31f2d30b0af9f36ceca8c674ed084b7c93e Mon Sep 17 00:00:00 2001
From: Carlos Matos <cmatos@redhat.com>
Date: Mon, 19 Apr 2021 13:07:04 -0400
Subject: [PATCH 1/3] Creating new RHEL 7 STIG GUI profile
---
rhel7/profiles/stig_gui.profile | 35 +++++++++++++++++++++++++++++++++
1 file changed, 35 insertions(+)
create mode 100644 rhel7/profiles/stig_gui.profile
diff --git a/rhel7/profiles/stig_gui.profile b/rhel7/profiles/stig_gui.profile
new file mode 100644
index 00000000000..5f64363d64b
--- /dev/null
+++ b/rhel7/profiles/stig_gui.profile
@@ -0,0 +1,35 @@
+documentation_complete: true
+
+metadata:
+ version: V3R1
+ SMEs:
+ - carlosmmatos
+
+reference: https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=operating-systems%2Cunix-linux
+
+title: 'DISA STIG with GUI for Red Hat Enterprise Linux 7'
+
+description: |-
+ This profile contains configuration checks that align to the
+ DISA STIG with GUI for Red Hat Enterprise Linux V3R2.
+
+ In addition to being applicable to Red Hat Enterprise Linux 7, DISA recognizes this
+ configuration baseline as applicable to the operating system tier of
+ Red Hat technologies that are based on Red Hat Enterprise Linux 7, such as:
+
+ - Red Hat Enterprise Linux Server
+ - Red Hat Enterprise Linux Workstation and Desktop
+ - Red Hat Enterprise Linux for HPC
+ - Red Hat Storage
+ - Red Hat Containers with a Red Hat Enterprise Linux 7 image
+
+ Warning: The installation and use of a Graphical User Interface (GUI)
+ increases your attack vector and decreases your overall security posture. If
+ your Information Systems Security Officer (ISSO) lacks a documented operational
+ requirement for a graphical user interface, please consider using the
+ standard DISA STIG for Red Hat Enterprise Linux 7 profile.
+
+extends: stig
+
+selections:
+ - '!xwindows_remove_packages'
From 04a2f7553cb95b34c1af28c93fabe945aa5fa0de Mon Sep 17 00:00:00 2001
From: Carlos Matos <cmatos@redhat.com>
Date: Tue, 20 Apr 2021 08:26:31 -0400
Subject: [PATCH 2/3] Updated metadata version to V3R2
---
rhel7/profiles/stig.profile | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/rhel7/profiles/stig.profile b/rhel7/profiles/stig.profile
index 1ea19bc4d8a..192a0874d19 100644
--- a/rhel7/profiles/stig.profile
+++ b/rhel7/profiles/stig.profile
@@ -1,7 +1,7 @@
documentation_complete: true
metadata:
- version: V3R1
+ version: V3R2
SMEs:
- carlosmmatos
From 28938e0655c4a3adac767f278317bb83dca162b0 Mon Sep 17 00:00:00 2001
From: Carlos Matos <cmatos@redhat.com>
Date: Wed, 21 Apr 2021 11:00:03 -0400
Subject: [PATCH 3/3] Updated metadata version to V3R2 on stig_gui profile
---
rhel7/profiles/stig_gui.profile | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/rhel7/profiles/stig_gui.profile b/rhel7/profiles/stig_gui.profile
index 5f64363d64b..c15ea10fdae 100644
--- a/rhel7/profiles/stig_gui.profile
+++ b/rhel7/profiles/stig_gui.profile
@@ -1,7 +1,7 @@
documentation_complete: true
metadata:
- version: V3R1
+ version: V3R2
SMEs:
- carlosmmatos