DISA STIG library V2R10

Revision History, V2R10: - RHEL-09-271011: Renumbered STIG ID from RHEL-09-171011 to RHEL-09- 271011. - RHEL-09-211045: Updated Fix Text to place setting in the [Manager] section of the file. - RHEL-09-212010: Updated Rule Title and Check Text IAW Red Hat recommendations. - RHEL-09-214015: Updated allowed values to either “1”, “true”, or “yes”. - RHEL-09-214020: Updated allowed values to either “1”, “true”, or “yes”. - RHEL-09-214025: Updated allowed values to either “1”, “true”, or “yes”. - RHEL-09-214035: Updated allowed values to either “1”, “true”, or “yes”. - RHEL-09-215030: Removed unnecessary requirement. - RHEL-09-215065: Removed unnecessary requirement. - RHEL-09-215105: Removed allowance for subpolicies from STIG. - RHEL-09-231040: Updated to prohibit autofs. - RHEL-09-271010: Changed “display” in the Rule Title, Check, and Fix to “enable”. - RHEL-09-411010: Updated max password age value to 180 days. - RHEL-09-411015: Updated max password age value to 180 days. - RHEL-09-411035: Updated interactive login shell for system accounts control. - RHEL-09-412080: Added nonapplicability note for cloud hosted systems where ClientAliveInterval is set for SSH connections. - RHEL-09-432015: Enforced “timestamp_timeout=0” with no other setting being acceptable. - RHEL-09-611135: Added NA note. - RHEL-09-611195: Updated to not make changes to system file, and updated Fix to only include 3 lines in drop-in file. - RHEL-09-611200: Updated to not make changes to system file, and updated Fix to only include 3 lines in drop-in file. - RHEL-09-651010: Updated Fix Text to reflect modern output. - RHEL-09-652060: Updated cron logging control to meet SRG intent. - RHEL-09-653045: Updated Vulnerability Discussion to correct path. 30 September 2026 UNCLASSIFIED Red Hat Enterprise Linux (RHEL) 9 STIG Revision History, V2R10 DISA 30 September 2026 Developed by DISA for the DoW 2 UNCLASSIFIED REVISION HISTORY Revision Number Document Revised Description of Change Release Date - RHEL-09-653110: Updated audit config permissions for OL8 and TOSS 4 and specified files in /etc/audit/rules.d/ for all rules. - RHEL-09-654100: Edited audit rule to monitor for ALL users. - RHEL-09-654120: Edited audit rule to monitor for ALL users. - RHEL-09-654176: Added control to audit the useradd command. - RHEL-09-654235: Updated Rule Title to correct path. - RHEL-09-672055: Added openssl.cnf include statement requirement to STIG. - Rule numbers updated throughout due to changes in content management system. - Requirements were updated throughout to reflect the change from DOD to DoW.