DISA STIG library V1R3

Revision History, V1R3: - RHEL-10-001030: Updated allowed values to either "1", "true", or "yes". - RHEL-10-001040: Updated allowed values to either "1", "true", or "yes". - RHEL-10-001050: Updated allowed values to either "1", "true", or "yes". - RHEL-10-200000: Updated allowed values to either "1", "true", or "yes". - RHEL-10-200050: Removed duplicate rule for TFTP. - RHEL-10-200090: Fixed typo in package name. - RHEL-10-200640: Fixed typo in package name. - RHEL-10-200648: Updated cron logging control to meet SRG intent. - RHEL-10-200730: Removed references to old pkcs11 package. - RHEL-10-300085: Added openssl.cnf include statement requirement to STIG. - RHEL-10-300090: Removed allowance for missing nss symlink. - RHEL-10-500105: Updated Check Text finding statement to indicate the "admin_space_left" keyword. - RHEL-10-500450: Edited audit rule to monitor for ALL users. - RHEL-10-500490: Edited audit rule to monitor for ALL users. - RHEL-10-500605: Added requirement to audit the useradd command. - RHEL-10-500610: Reverted key word in rule to previous setting to avoid use of a key word. - RHEL-10-500680: Changed rule key to "identity". - RHEL-10-500690: Removed trailing "/" from path in Check and Fix. - RHEL-10-500720: Edited audit rule to specifically target architectures and fixed typo in Fix Text. - RHEL-10-600000: Updated Rule Title and Check Text IAW Red Hat recommendations. - RHEL-10-600020: Updated interactive login shell for system accounts control. - RHEL-10-600100: Updated max password age value to 180 days. - RHEL-10-600110: Updated max password age value to 180 days. - RHEL-10-600740: Updated Discussion to address yescrypt. 30 September 2026 UNCLASSIFIED Red Hat Enterprise Linux (RHEL) 10 STIG Revision History, V1R3 DISA 30 September 2026 Developed by DISA for the DoW 2 UNCLASSIFIED REVISION HISTORY Revision Number Document Revised Description of Change Release Date - RHEL-10-600750: Corrected Check text to require sha512 only and Fix Text to indicate "[defaults]" as the section of the file. Added N/A note. - RHEL-10-700920: Updated rule title to state 10 minutes. - RHEL-10-700950: Updated control to use drop-in file and to specify section. - RHEL-10-701210: Updated to prohibit autofs. - Requirements were updated throughout to reflect the change from DOD to DoW. - Rule numbers updated throughout due to changes in content management system.