DISA Secure Technical Implementation Guidelines

Any system implemented by the US Department of Defense (DoD) must meet the DISA Secure Technical Implementation Guidelines (STIG). The STIGs are publicly available and may also be implemented by organizations with particular security requirements. 

There is no STIG for Oracle Linux 9 now; however, in anticipation of the introduction of an official Oracle Linux 9 STIG, we have prepared a benchmark against the current STIG for Red Hat Enterprise Linux 9, Version 1, Release 3. See https://public.cyber.mil/stigs/ for general and version information about STIGs. The STIG benchmark and any updates for OL9 that are available are included in the monthly OSU. See Oracle-Linux-9-STIG-updates for more information.