DISA STIG library V1R3
| Ref | Title | Text | |
|---|---|---|---|
| RHEL-10-000520 | RHEL 10 must use a separate file system for the system audit data path. | Verify RHEL 10 uses a separate file system/partition for the system audit data path with the following command: Note: /var/log/audit is used as the example as it is a common location. $ mount | grep /var/log/audit /dev/mapper/rootvg-varloga | |
| RHEL-10-200662 | RHEL 10 must have the "audispd-plugins" package installed. | Verify RHEL 10 has the "audispd-plugins" package installed with the following command: $ sudo dnf list --installed audispd-plugins Installed Packages audispd-plugins.x86_64 4.0.3-1.el10 @rhel-10-for-x86_64-baseos-rpms If the "audispd-plugin | |
| RHEL-10-500100 | RHEL 10 must allocate audit record storage capacity to store at least one week's worth of audit records. | Verify RHEL 10 allocates audit record storage capacity to store at least one week of audit records when audit records are not immediately sent to a central audit record storage facility. Note: The partition size needed to capture a week of | |
| RHEL-10-600475 | RHEL 10 must limit the number of concurrent sessions to 10 for all accounts and/or account types. | Verify RHEL 10 limits the number of concurrent sessions to "10" for all accounts and/or account types with the following command: $ sudo grep -rs maxlogins /etc/security/limits.conf /etc/security/limits.d/*.conf | grep -v '#' /etc/security/ | |
| RHEL-10-700890 | RHEL 10 must disable the graphical user interface autorunner unless required. | Note: This requirement assumes the use of the RHEL 10 default graphical user interface, the GNOME desktop environment. If the system does not have any graphical user interface installed, this requirement is not applicable. Verify RHEL 10 di |
5 of 435.