Skip to content

Create RHEL 10 STIG control file #14826

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
Mab879 merged 7 commits into from
Jun 25, 2026
Merged

Create RHEL 10 STIG control file #14826

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
7 commits
Select commit Hold shift + click to select a range
b7f0824
Fix traceback when SRG doesn't exist
jan-cerny Jun 23, 2026
6acd795
Create RHEL 10 STIG control file
jan-cerny Jun 23, 2026
b96e054
Perform initial control mapping
jan-cerny Jun 23, 2026
8257c0d
Update profile stability data
jan-cerny Jun 25, 2026
8b290eb
Add missing CCEs
jan-cerny Jun 25, 2026
4981746
Prevent rule removal from RHEL 10
jan-cerny Jun 25, 2026
468a7c0
Change YAML formatting using yamlfix
jan-cerny Jun 25, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
1 change: 1 addition & 0 deletions linux_os/guide/services/ssh/sshd_approved_ciphers.var
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -14,6 +14,7 @@ options:
stig: aes256-ctr,aes192-ctr,aes128-ctr
stig_extended: aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes128-ctr
stig_rhel9: aes256-gcm@openssh.com,aes256-ctr,aes128-gcm@openssh.com,aes128-ctr
stig_rhel10: aes256-gcm@openssh.com,aes256-ctr,aes128-gcm@openssh.com,aes128-ctr
default: aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc,aes192-cbc,aes256-cbc,rijndael-cbc@lysator.liu.se
cis_rhel8: -3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc,rijndael-cbc@lysator.liu.se
cis_rhel9: -3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc,rijndael-cbc@lysator.liu.se
Expand Down
1 change: 1 addition & 0 deletions linux_os/guide/services/ssh/sshd_approved_macs.var
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -14,6 +14,7 @@ options:
stig: hmac-sha2-512,hmac-sha2-256
stig_extended: hmac-sha2-512-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-256
stig_rhel9: hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512
stig_rhel10: hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512
default: hmac-sha2-512,hmac-sha2-256,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com
cis_sle12: hmac-sha2-512-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-256
cis_sle15: hmac-sha2-512-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-256
Expand Down
1 change: 1 addition & 0 deletions linux_os/guide/system/permissions/partitions/mount_option_boot_efi_nosuid/rule.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -20,6 +20,7 @@ severity: medium
identifiers:
cce@rhel8: CCE-86038-7
cce@rhel9: CCE-86040-3
cce@rhel10: CCE-86492-6

references:
nist: CM-6(b),CM-6.1(iv)
Expand Down
1 change: 1 addition & 0 deletions linux_os/guide/system/software/updating/enable_gpgcheck_for_all_repositories/rule.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -20,6 +20,7 @@ severity: high

identifiers:
cce@rhel8: CCE-86187-2
cce@rhel10: CCE-86484-3

references:
srg: SRG-OS-000366-GPOS-00153
Expand Down
Loading
Loading