DISA: Red Hat Enterprise Linux 9

The Defense Information Systems Agency (DISA) STIG template for Red Hat Enterprise Linux 9, Version 1 release 1 was published on September 22, 2023. This template contains implementation for 516 rules that can be installed on TrueSight Server Automation 20.x or later.

  • The existing customized template is renamed before you import the new one (by performing the steps given below).

Before you begin

Before you import this template, make sure that the following requirements are met:

  • Rename any existing customized template before you import the latest template.
  • Back up the extended_objects   folder located in the  <APPRSERVER_INSTALL_DIR>/share/sensors  directory on all the Application Servers in a multiple Application Server environment. This folder contains the extended object scripts.

Step 1: Download the files

  1. Access the following EPD link and click  TSSA 23.4.00 DISA STIG Updates for RHEL 9 to download the  DISA - Red Hat Enterprise Linux 9  package:
    You must log in or register to view this page
  2. Expand to view the checksum-related information

    Verify the downloaded content by using checksums:

    S.No

    File Name

    MD5SUM

    1

    DISA - Red Hat Enterprise Linux 9.zip

    e00af50e711a06b85352dd3411d9d6c5

    2

    ExtendedObjects.zip

    b31528c8c6d5b8c206928a74d39dd62a

  3. Extract the contents of the ExtendedObjects .zip file to a temporary directory and copy the extracted files to the existing <APPRSERVER_INSTALL_DIR>/share/sensors directory on all the Application Servers.
  4. Move the DISA - Red Hat Enterprise Linux 9.zip file to the server where the TrueSight Server Automation console is installed.

Step 2: Import the compliance content

  1. Log in to the TrueSight Server Automation console.
  2. Right-click Component Templates and select Import.
    import.png
  3. Select the Import (Version-neutral) option and click OK.
    version_neutral.png

  4. Select the DISA - Red Hat Enterprise Linux 9.zip package from the temporary location and click Next.
    The DISA template for DISA - Red Hat Enterprise Linux 9 is available in the DISA - Red Hat Enterprise Linux 9.zip  package.

    package.png

  5. Select the Update objects according to the imported package and Preserve template group path options, and click Next.
    template.png
  6. Navigate to the last screen of the wizard and then click Finish.
    finish.png

  7. After the template is imported successfully, Click OK.
    The imported template is displayed under DISA Compliance Content  >  DISA STIG Revised .
    successful.png

    Important

    After you have sucessfully imported the template, check the default values for the template's local and global properties and make sure that they meet the organization standards.

Rules within the template

The 516 rules provided in the zip package contain the following types of rules:

  • Rules that check for compliance (audit) and provide remediation—438
  • Rules that check for compliance (audit) but do not provide remediation—78
  • Rules that do not check for compliance and do not provide remediation—20

The following are the details of the rules that are divided into parts:

  • Rules not divided into parts = 424
  • Rules divided into two parts (39 Rules) so (39 * 2) = 78
  • Rules divided into three parts (1 Rule) so (1 * 3) = 3
  • Rules divided into five parts (1 Rule) so (1 * 5) = 5
  • Rules divided into six parts (1 Rule) so (1 * 6) = 6

The current rule count according to DISA - Red Hat Enterprise Linux 9  template after running the compliance job is 516 (424+78+3+5+6).

 

Tip: For faster searching, add an asterisk to the end of your partial query. Example: cert*