Merge pull request #12550 from Mab879/update_rhel8_stig_v2r1

Update RHEL 8 STIG to V2R1
ComplianceAsCode · Oct 30, 2024 · 26bb026 · 26bb026
2 parents 292f26a + c7e407e
commit 26bb026
Show file tree

Hide file tree

Showing 7 changed files with 1,508 additions and 1,876 deletions.
diff --git a/linux_os/guide/system/software/system-tools/package_rng-tools_installed/rule.yml b/linux_os/guide/system/software/system-tools/package_rng-tools_installed/rule.yml
@@ -31,7 +31,7 @@ fixtext: '{{{ fixtext_package_installed("rng-tools") }}}'
 
 srg_requirement: '{{{ srg_requirement_package_installed("rng-tools") }}}'
 
-platform: system_with_kernel
+platform: system_with_kernel and not runtime_kernel_fips_enabled
 
 template:
     name: package_installed

diff --git a/products/rhel8/profiles/stig.profile b/products/rhel8/profiles/stig.profile
@@ -1,7 +1,7 @@
 documentation_complete: true
 
 metadata:
-    version: V1R14
+    version: V2R1
     SMEs:
         - mab879
         - ggbecker
@@ -12,7 +12,7 @@ title: 'DISA STIG for Red Hat Enterprise Linux 8'
 
 description: |-
     This profile contains configuration checks that align to the
-    DISA STIG for Red Hat Enterprise Linux 8 V1R14.
+    DISA STIG for Red Hat Enterprise Linux 8 V2R1.
 
     In addition to being applicable to Red Hat Enterprise Linux 8, DISA recognizes this
     configuration baseline as applicable to the operating system tier of
@@ -547,7 +547,7 @@ selections:
 
     # RHEL-08-020035
     - logind_session_timeout
-    - var_logind_session_timeout=15_minutes
+    - var_logind_session_timeout=10_minutes
 
     # RHEL-08-020039
     - package_tmux_installed

diff --git a/products/rhel8/profiles/stig_gui.profile b/products/rhel8/profiles/stig_gui.profile
@@ -1,7 +1,7 @@
 documentation_complete: true
 
 metadata:
-    version: V1R14
+    version: V2R1
     SMEs:
         - mab879
         - ggbecker
@@ -12,7 +12,7 @@ title: 'DISA STIG with GUI for Red Hat Enterprise Linux 8'
 
 description: |-
     This profile contains configuration checks that align to the
-    DISA STIG with GUI for Red Hat Enterprise Linux 8 V1R14.
+    DISA STIG with GUI for Red Hat Enterprise Linux 8 V2R1.
 
     In addition to being applicable to Red Hat Enterprise Linux 8, DISA recognizes this
     configuration baseline as applicable to the operating system tier of

diff --git a/...es/disa-stig-rhel8-v1r14-xccdf-manual.xml → ...ces/disa-stig-rhel8-v2r1-xccdf-manual.xml b/...es/disa-stig-rhel8-v1r14-xccdf-manual.xml → ...ces/disa-stig-rhel8-v2r1-xccdf-manual.xml
diff --git a/...nces/disa-stig-rhel8-v1r13-xccdf-scap.xml → ...ences/disa-stig-rhel8-v2r1-xccdf-scap.xml b/...nces/disa-stig-rhel8-v1r13-xccdf-scap.xml → ...ences/disa-stig-rhel8-v2r1-xccdf-scap.xml
diff --git a/tests/data/profile_stability/rhel8/stig.profile b/tests/data/profile_stability/rhel8/stig.profile
@@ -1,6 +1,6 @@
 description: 'This profile contains configuration checks that align to the
 
-    DISA STIG for Red Hat Enterprise Linux 8 V1R14.
+    DISA STIG for Red Hat Enterprise Linux 8 V2R1.
 
 
     In addition to being applicable to Red Hat Enterprise Linux 8, DISA recognizes
@@ -23,7 +23,7 @@ description: 'This profile contains configuration checks that align to the
 extends: null
 hidden: ''
 metadata:
-    version: V1R14
+    version: V2R1
     SMEs:
     - mab879
     - ggbecker
@@ -492,7 +492,7 @@ selections:
 - var_slub_debug_options=P
 - var_user_initialization_files_regex=all_dotfiles
 - var_screensaver_lock_delay=5_seconds
-- var_logind_session_timeout=15_minutes
+- var_logind_session_timeout=10_minutes
 - var_auditd_name_format=stig
 unselected_groups: []
 platforms: !!set {}

diff --git a/tests/data/profile_stability/rhel8/stig_gui.profile b/tests/data/profile_stability/rhel8/stig_gui.profile
@@ -1,6 +1,6 @@
 description: 'This profile contains configuration checks that align to the
 
-    DISA STIG with GUI for Red Hat Enterprise Linux 8 V1R14.
+    DISA STIG with GUI for Red Hat Enterprise Linux 8 V2R1.
 
 
     In addition to being applicable to Red Hat Enterprise Linux 8, DISA recognizes
@@ -34,7 +34,7 @@ description: 'This profile contains configuration checks that align to the
 extends: null
 hidden: ''
 metadata:
-    version: V1R14
+    version: V2R1
     SMEs:
     - mab879
     - ggbecker
@@ -498,7 +498,7 @@ selections:
 - var_slub_debug_options=P
 - var_user_initialization_files_regex=all_dotfiles
 - var_screensaver_lock_delay=5_seconds
-- var_logind_session_timeout=15_minutes
+- var_logind_session_timeout=10_minutes
 - var_auditd_name_format=stig
 unselected_groups: []
 platforms: !!set {}