Merge pull request #11877 from Mab879/rhel_9_v1r3

Update RHEL9 STIG to V1R3
ComplianceAsCode · Apr 26, 2024 · 7b83304 · 7b83304
2 parents 64f40ad + cefcc10
commit 7b83304
Show file tree

Hide file tree

Showing 4 changed files with 90 additions and 113 deletions.
diff --git a/controls/stig_rhel9.yml b/controls/stig_rhel9.yml
@@ -2,7 +2,7 @@ policy: 'Red Hat Enterprise Linux 9 Security Technical Implementation Guide'
 title: 'Red Hat Enterprise Linux 9 Security Technical Implementation Guide'
 id: stig_rhel9
 source: https://public.cyber.mil/stigs/downloads/
-version: V1R2
+version: V1R3
 reference_type: stigid
 product: rhel9
 levels:
@@ -1880,14 +1880,6 @@ controls:
             - harden_sshd_ciphers_opensshserver_conf_crypto_policy
         status: automated
 
-    -   id: RHEL-09-255070
-        levels:
-            - medium
-        title:
-            RHEL 9 SSH client must be configured to use only Message Authentication Codes
-            (MACs) employing FIPS 140-3 validated cryptographic hash algorithms.
-        status: pending
-
     -   id: RHEL-09-255075
         levels:
             - medium

diff --git a/products/rhel9/profiles/stig.profile b/products/rhel9/profiles/stig.profile
@@ -1,7 +1,7 @@
 documentation_complete: true
 
 metadata:
-    version: V1R2
+    version: V1R3
     SMEs:
         - mab879
         - ggbecker
@@ -12,7 +12,7 @@ title: 'DISA STIG for Red Hat Enterprise Linux 9'
 
 description: |-
     This profile contains configuration checks that align to the
-    DISA STIG for Red Hat Enterprise Linux 9 V1R2.
+    DISA STIG for Red Hat Enterprise Linux 9 V1R3.
 
     In addition to being applicable to Red Hat Enterprise Linux 9, DISA recognizes this
     configuration baseline as applicable to the operating system tier of

diff --git a/products/rhel9/profiles/stig_gui.profile b/products/rhel9/profiles/stig_gui.profile
@@ -1,7 +1,7 @@
 documentation_complete: true
 
 metadata:
-    version: V1R2
+    version: V1R3
     SMEs:
         - mab879
         - ggbecker
@@ -12,7 +12,7 @@ title: 'DISA STIG with GUI for Red Hat Enterprise Linux 9'
 
 description: |-
     This profile contains configuration checks that align to the
-    DISA STIG for Red Hat Enterprise Linux 9 V1R2.
+    DISA STIG for Red Hat Enterprise Linux 9 V1R3.
 
 
     In addition to being applicable to Red Hat Enterprise Linux 9, DISA recognizes this

diff --git a/...ces/disa-stig-rhel9-v1r2-xccdf-manual.xml → ...ces/disa-stig-rhel9-v1r3-xccdf-manual.xml b/...ces/disa-stig-rhel9-v1r2-xccdf-manual.xml → ...ces/disa-stig-rhel9-v1r3-xccdf-manual.xml