DISA: Red Hat Enterprise Linux 8

This document provides information about the hotfix containing Red Hat Linux 8 Benchmark Version 1 Release 0.1. This template contains implementation for 266 rules that can be installed on TrueSight Server Automation 21.02 or later versions.

Before you begin

Before you install this hotfix, ensure that you perform the following:

• Ensure that all compliance content provided by BMC in your environment is at least updated to version 21.02.
• Save backup copies of the sensors folders, which are present on all Application Servers in your environment. The sensors folders contain extended object scripts and is located at the following path:
  <Application_Server_installation_directory >/share/sensors

Step 1: Downloading and installing the files

1. Download the DISA-RedHat8 and extended_objects packages from the following FTP location:
   
   You must log in or register to view this page

   Click here to expand checksum related infromation

    Verify the downloaded content by using the following check sums.

   Sr.No	File Name	MD5SUM
   1	DISA - RedHat 8.zip	46c8ac386fc0b3840f29258d96bb0209
   2	extended_objects.zip	00186f167a831555e792808b2fa96abe

2. Move the DISA-RedHat8 package to the server where the TrueSight Server Automation console is installed.
3. Extract the contents from the extended_objects package and move them to a temporary location on all Application Servers.
4. Replace the extended object scripts in the following directory on all the Application Servers:
   <Application_Server_installation_directory>/share/sensors/

Step 2: Importing the Compliance Content

1. Log in to the TrueSight Server Automation console.
2. Right-click Component Templates and click Import. 
   
   
3. Select the Import (Version-neutral) option.
   
   
4. From the directory where you extracted the template files, select the DISA - RedHat 8 zip package and click Next.
   
   
   
   
   

5. To import the templates, select DISA - Red Hat Enterprise Linux 8, and click Next.
   
   
   
   

   Note

   Ensure that you select the Update objects according to the imported package and Preserve template group path options before you click Next.

6. Navigate to the last screen of the wizard and click Finish.
   
   
   
   The template is imported successfully.

Rules within the template

The following are the details of the 267 rules provided in the zip package. It contains the following types of rules:

• Rules that check for compliance and provides remediation - 190
• Rules that check for compliance but do not provide remediation - 58
• Rules that do not check for compliance and do not provide remediation - 19

The following are the details of the rules that are divided into parts:

• Rules not divided into parts - 208
• Rules Divided into two parts - (11 Rules divided into 2 parts) so (11 * 2) = 22
• Rules Divided into three parts - (1 Rule divided into 3 parts) so (1 * 3) = 3
• Rules Divided into four parts - (6 Rules is divided into 4 parts) so (6 * 4) = 24
• Rules Divided into ten parts - (1 Rule is divided into 10 parts) so (1 * 10) = 10

So, the current rule count as per DISA - Red Hat Enterprise Linux 8 template after running the compliance job is 267 (208 + 22 + 3+ 24 + 10).

The following tables list the rules with no compliance checks or remediation along with comments.

Rules with compliance checks but no remediation

 Manual rules - rules without any compliance checks or remediation