Update RHEL 9 STIG IDs based on feedback

alanmcanonical · Oct 30, 2023 · 4522aef · 4522aef
1 parent 0ab9908
commit 4522aef
Show file tree

Hide file tree

Showing 7 changed files with 4 additions and 3 deletions.
diff --git a/..._configure_rules/audit_privileged_commands/audit_rules_privileged_commands_mount/rule.yml b/..._configure_rules/audit_privileged_commands/audit_rules_privileged_commands_mount/rule.yml
@@ -52,6 +52,7 @@ references:
     stigid@ol8: OL08-00-030300
     stigid@rhel7: RHEL-07-030740
     stigid@rhel8: RHEL-08-030300
+    stigid@rhel9: RHEL-09-654180
     stigid@sle12: SLES-12-020290
     stigid@ubuntu2004: UBTU-20-010138
 

diff --git a/linux_os/guide/system/auditing/auditd_configure_rules/audit_rules_media_export/rule.yml b/linux_os/guide/system/auditing/auditd_configure_rules/audit_rules_media_export/rule.yml
@@ -61,7 +61,6 @@ references:
     stigid@ol8: OL08-00-030302
     stigid@rhel7: RHEL-07-030740
     stigid@rhel8: RHEL-08-030302
-    stigid@rhel9: RHEL-09-654180
     stigid@sle12: SLES-12-020290
     stigid@sle15: SLES-15-030350
 

diff --git a/...os/guide/system/permissions/restrictions/sysctl_kernel_unprivileged_bpf_disabled/rule.yml b/...os/guide/system/permissions/restrictions/sysctl_kernel_unprivileged_bpf_disabled/rule.yml
@@ -26,6 +26,7 @@ references:
     srg: SRG-OS-000132-GPOS-00067,SRG-OS-000480-GPOS-00227
     stigid@ol8: OL08-00-040281
     stigid@rhel8: RHEL-08-040281
+    stigid@rhel9: RHEL-09-213075
 
 {{{ complete_ocil_entry_sysctl_option_value(sysctl="kernel.unprivileged_bpf_disabled", value="1") }}}
 

diff --git a/.../permissions/restrictions/sysctl_kernel_unprivileged_bpf_disabled_accept_default/rule.yml b/.../permissions/restrictions/sysctl_kernel_unprivileged_bpf_disabled_accept_default/rule.yml
@@ -35,7 +35,6 @@ references:
     nist: AC-6,SC-7(10)
     ospp: FMT_SMF_EXT.1
     srg: SRG-OS-000132-GPOS-00067,SRG-OS-000480-GPOS-00227
-    stigid@rhel9: RHEL-09-213075
 
 ocil: |-
     The runtime status of the <code>kernel.unprivileged_bpf_disabled</code>

diff --git a/...s/guide/system/software/gnome/gnome_media_settings/dconf_gnome_disable_automount/rule.yml b/...s/guide/system/software/gnome/gnome_media_settings/dconf_gnome_disable_automount/rule.yml
@@ -48,7 +48,6 @@ references:
     srg: SRG-OS-000114-GPOS-00059,SRG-OS-000378-GPOS-00163,SRG-OS-000480-GPOS-00227
     stigid@ol7: OL07-00-020111
     stigid@rhel7: RHEL-07-020111
-    stigid@rhel9: RHEL-09-271030,RHEL-09-271035
 
 ocil_clause: 'GNOME automounting is not disabled'
 

diff --git a/..._os/guide/system/software/gnome/gnome_media_settings/dconf_gnome_disable_autorun/rule.yml b/..._os/guide/system/software/gnome/gnome_media_settings/dconf_gnome_disable_autorun/rule.yml
@@ -48,6 +48,7 @@ references:
     srg: SRG-OS-000114-GPOS-00059,SRG-OS-000378-GPOS-00163,SRG-OS-000480-GPOS-00227
     stigid@ol7: OL07-00-020111
     stigid@rhel7: RHEL-07-020111
+    stigid@rhel9: RHEL-09-271030,RHEL-09-271035
 
 ocil_clause: 'GNOME autorun is not disabled'
 

diff --git a/...s/guide/system/software/integrity/software-integrity/aide/aide_scan_notification/rule.yml b/...s/guide/system/software/integrity/software-integrity/aide/aide_scan_notification/rule.yml
@@ -50,6 +50,7 @@ references:
     stigid@ol8: OL08-00-010360
     stigid@rhel7: RHEL-07-020040
     stigid@rhel8: RHEL-08-010360
+    stigid@rhel9: RHEL-09-651015
     stigid@sle12: SLES-12-010510
     stigid@sle15: SLES-15-010570