ComplianceAsCode · redhatrises · Apr 16, 2020 · Mar 14, 2020 · Mar 24, 2020 · Mar 24, 2020
diff --git a/linux_os/guide/services/base/service_kdump_disabled/rule.yml b/linux_os/guide/services/base/service_kdump_disabled/rule.yml
@@ -25,6 +25,7 @@ identifiers:
     cce@rhel8: 80878-2
 
 references:
+    stigid@ol7: "021300"
     disa: "366"
     hipaa: 164.308(a)(1)(ii)(D),164.308(a)(3),164.308(a)(4),164.310(b),164.310(c),164.312(a),164.312(e)
     nist: CM-7(a),CM-7(b),CM-6(a)

diff --git a/..._os/guide/services/cron_and_at/restrict_at_cron_users/file_groupowner_cron_allow/rule.yml b/..._os/guide/services/cron_and_at/restrict_at_cron_users/file_groupowner_cron_allow/rule.yml
@@ -18,6 +18,7 @@ identifiers:
     cce@rhel7: 80379-1
 
 references:
+    stigid@ol7: "021120"
     disa: "366"
     nist: CM-6(a),AC-6(1)
     nist-csf: PR.AC-4,PR.DS-5

diff --git a/linux_os/guide/services/cron_and_at/restrict_at_cron_users/file_owner_cron_allow/rule.yml b/linux_os/guide/services/cron_and_at/restrict_at_cron_users/file_owner_cron_allow/rule.yml
@@ -18,6 +18,7 @@ identifiers:
     cce@rhel7: 80378-3
 
 references:
+    stigid@ol7: "021110"
     disa: "366"
     nist: CM-6(a),AC-6(1)
     nist-csf: PR.AC-4,PR.DS-5

diff --git a/linux_os/guide/services/ftp/disabling_vsftpd/package_vsftpd_removed/rule.yml b/linux_os/guide/services/ftp/disabling_vsftpd/package_vsftpd_removed/rule.yml
@@ -18,6 +18,7 @@ identifiers:
     cce@rhel8: 82414-4
 
 references:
+    stigid@ol7: "040690"
     disa@rhel6: "1436"
     disa: "366"
     nist: CM-7(a),CM-7(b),CM-6(a)

diff --git a/...en_os/postfix_server_cfg/postfix_server_relay/postfix_prevent_unrestricted_relay/rule.yml b/...en_os/postfix_server_cfg/postfix_server_relay/postfix_prevent_unrestricted_relay/rule.yml
@@ -20,6 +20,7 @@ identifiers:
     cce@rhel7: 80512-7
 
 references:
+    stigid@ol7: "040680"
     disa: "366"
     srg: SRG-OS-000480-GPOS-00227
     stigid@rhel7: "040680"

diff --git a/...ring_clients/mounting_remote_filesystems/mount_option_krb_sec_remote_filesystems/rule.yml b/...ring_clients/mounting_remote_filesystems/mount_option_krb_sec_remote_filesystems/rule.yml
@@ -18,6 +18,7 @@ identifiers:
     cce@rhel7: 27458-9
 
 references:
+    stigid@ol7: "040750"
     disa: "366"
     nist: CM-7(a),CM-7(b),CM-6(a),IA-2,IA-2(8),IA-2(9),AC-17(a)
     nist-csf: PR.AC-4,PR.AC-7

diff --git a/...uring_clients/mounting_remote_filesystems/mount_option_noexec_remote_filesystems/rule.yml b/...uring_clients/mounting_remote_filesystems/mount_option_noexec_remote_filesystems/rule.yml
@@ -18,6 +18,7 @@ identifiers:
     cce@rhel7: 80436-9
 
 references:
+    stigid@ol7: "021021"
     disa: "366"
     nist: AC-6,AC-6(8),AC-6(10),CM-6(a)
     nist-csf: PR.AC-4,PR.DS-5

diff --git a/...uring_clients/mounting_remote_filesystems/mount_option_nosuid_remote_filesystems/rule.yml b/...uring_clients/mounting_remote_filesystems/mount_option_nosuid_remote_filesystems/rule.yml
@@ -17,6 +17,7 @@ identifiers:
     cce@rhel7: 80240-5
 
 references:
+    stigid@ol7: "021020"
     stigid@rhel6: "000270"
     srg@rhel6: SRG-OS-999999
     disa: "366"

diff --git a/linux_os/guide/services/ntp/chronyd_or_ntpd_set_maxpoll/rule.yml b/linux_os/guide/services/ntp/chronyd_or_ntpd_set_maxpoll/rule.yml
@@ -19,7 +19,7 @@ rationale: |-
     forensic analysis and investigating system events. Sources outside the
     configured acceptable allowance (drift) may be inaccurate.
 
-severity: unknown
+severity: medium
 
 platform: machine  # The check uses service_... extended definition, which doesnt support offline mode
 
@@ -28,6 +28,7 @@ identifiers:
     cce@ocp4: 82684-2
 
 references:
+    stigid@ol7: "040500"
     disa: 1891,2046
     nist: CM-6(a),AU-8(1)(b)
     nist-csf: PR.PT-1

diff --git a/linux_os/guide/services/obsolete/nis/package_ypserv_removed/rule.yml b/linux_os/guide/services/obsolete/nis/package_ypserv_removed/rule.yml
@@ -23,6 +23,7 @@ identifiers:
     cce@rhel8: 82432-6
 
 references:
+    stigid@ol7: "020010"
     stigid@rhel6: "000220"
     srg@rhel6: SRG-OS-000095
     disa@rhel6: '305'

diff --git a/linux_os/guide/services/obsolete/r_services/no_host_based_files/rule.yml b/linux_os/guide/services/obsolete/r_services/no_host_based_files/rule.yml
@@ -24,6 +24,7 @@ identifiers:
     cce@rhel7: 80513-5
 
 references:
+    stigid@ol7: "040550"
     disa: "366"
     srg: SRG-OS-000480-GPOS-00227
     stigid@rhel7: "040550"

diff --git a/linux_os/guide/services/obsolete/r_services/no_user_host_based_files/rule.yml b/linux_os/guide/services/obsolete/r_services/no_user_host_based_files/rule.yml
@@ -24,6 +24,7 @@ identifiers:
     cce@rhel7: 80514-3
 
 references:
+    stigid@ol7: "040540"
     disa: "366"
     srg: SRG-OS-000480-GPOS-00227
     stigid@rhel7: "040540"

diff --git a/linux_os/guide/services/obsolete/r_services/package_rsh-server_removed/rule.yml b/linux_os/guide/services/obsolete/r_services/package_rsh-server_removed/rule.yml
@@ -23,6 +23,7 @@ identifiers:
     cce@rhel8: 82184-3
 
 references:
+    stigid@ol7: "020000"
     stigid@rhel6: "000213"
     srg@rhel6: SRG-OS-000095
     disa@rhel6: '305'

diff --git a/linux_os/guide/services/obsolete/telnet/package_telnet-server_removed/rule.yml b/linux_os/guide/services/obsolete/telnet/package_telnet-server_removed/rule.yml
@@ -30,6 +30,7 @@ identifiers:
     cce@rhel8: 82182-7
 
 references:
+    stigid@ol7: "021710"
     stigid@rhel6: "000206"
     srg@rhel6: SRG-OS-000095
     disa@rhel6: '305'

diff --git a/linux_os/guide/services/obsolete/tftp/package_tftp-server_removed/rule.yml b/linux_os/guide/services/obsolete/tftp/package_tftp-server_removed/rule.yml
@@ -23,10 +23,11 @@ identifiers:
     cce@rhel8: 82436-7
 
 references:
+    stigid@ol7: "040700"
     stigid@rhel6: "000222"
     srg@rhel6: SRG-OS-000095
     disa@rhel6: '305'
-    disa: 318,368,1812,1813,1814
+    disa: 318,366,368,1812,1813,1814
     nist: CM-7(a),CM-7(b),CM-6(a)
     nist-csf: PR.AC-3,PR.IP-1,PR.PT-3,PR.PT-4
     srg: SRG-OS-000480-GPOS-00227

diff --git a/linux_os/guide/services/obsolete/tftp/tftpd_uses_secure_mode/rule.yml b/linux_os/guide/services/obsolete/tftp/tftpd_uses_secure_mode/rule.yml
@@ -28,6 +28,7 @@ identifiers:
     cce@rhel8: 82434-2
 
 references:
+    stigid@ol7: "040720"
     stigid@rhel6: "000338"
     srg@rhel6: SRG-OS-999999
     disa: "366"

diff --git a/linux_os/guide/services/snmp/snmp_configure_server/snmpd_not_default_password/rule.yml b/linux_os/guide/services/snmp/snmp_configure_server/snmpd_not_default_password/rule.yml
@@ -24,6 +24,7 @@ identifiers:
     cce@rhel7: 27386-2
 
 references:
+    stigid@ol7: "040800"
     stigid@rhel6: "000341"
     srg@rhel6: SRG-OS-999999
     disa: "366"

diff --git a/linux_os/guide/services/ssh/file_permissions_sshd_private_key/rule.yml b/linux_os/guide/services/ssh/file_permissions_sshd_private_key/rule.yml
@@ -21,6 +21,7 @@ identifiers:
     cce@rhel8: 82424-3
 
 references:
+    stigid@ol7: "040420"
     cui: 3.1.13,3.13.10
     disa: "366"
     nist: AC-17(a),CM-6(a),AC-6(1)

diff --git a/linux_os/guide/services/ssh/file_permissions_sshd_pub_key/rule.yml b/linux_os/guide/services/ssh/file_permissions_sshd_pub_key/rule.yml
@@ -16,6 +16,7 @@ identifiers:
     cce@rhel8: 82428-4
 
 references:
+    stigid@ol7: "040410"
     cui: 3.1.13,3.13.10
     disa: "366"
     nist: AC-17(a),CM-6(a),AC-6(1)

diff --git a/linux_os/guide/services/ssh/package_openssh-server_installed/rule.yml b/linux_os/guide/services/ssh/package_openssh-server_installed/rule.yml
@@ -20,10 +20,11 @@ identifiers:
     cce@rhel8: 83303-8
 
 references:
+    stigid@ol7: "040300"
     disa: 2418,2420,2421,2422
     nist: CM-6(a)
     nist-csf: PR.DS-2,PR.DS-5
-    srg: SRG-OS-000423-GPOS-00187,SRG-OS-000423-GPOS-00188,SRG-OS-000423-GPOS-00189,SRG-OS000423-GPOS-00190
+    srg: SRG-OS-000423-GPOS-00187,SRG-OS-000423-GPOS-00188,SRG-OS-000423-GPOS-00189,SRG-OS-000424-GPOS-00188,SRG-OS-000425-GPOS-00189,SRG-OS-000426-GPOS-00190,SRG-OS000423-GPOS-00190
     stigid@rhel7: "040300"
     isa-62443-2013: 'SR 3.1,SR 3.8,SR 4.1,SR 4.2,SR 5.2'
     cobit5: APO01.06,DSS05.02,DSS05.04,DSS05.07,DSS06.02,DSS06.06

diff --git a/linux_os/guide/services/ssh/service_sshd_enabled/rule.yml b/linux_os/guide/services/ssh/service_sshd_enabled/rule.yml
@@ -27,11 +27,12 @@ identifiers:
     cce@rhel8: 82426-8
 
 references:
+    stigid@ol7: "040310"
     cui: 3.1.13,3.5.4,3.13.8
     disa: 2418,2420,2421,2422
     nist: CM-6(a),SC-8,SC-8(1),SC-8(2),SC-8(3),SC-8(4)
     nist-csf: PR.DS-2,PR.DS-5
-    srg: SRG-OS-000423-GPOS-00187,SRG-OS-000423-GPOS-00188,SRG-OS-000423-GPOS-00189,SRG-OS000423-GPOS-00190
+    srg: SRG-OS-000423-GPOS-00187,SRG-OS-000423-GPOS-00188,SRG-OS-000423-GPOS-00189,SRG-OS-000423-GPOS-00190
     stigid@rhel7: "040310"
     stigig@sle12: "030100"
     isa-62443-2013: 'SR 3.1,SR 3.8,SR 4.1,SR 4.2,SR 5.2'

diff --git a/linux_os/guide/services/ssh/ssh_server/disable_host_auth/rule.yml b/linux_os/guide/services/ssh/ssh_server/disable_host_auth/rule.yml
@@ -24,6 +24,7 @@ identifiers:
     cce@rhel8: 80786-7
 
 references:
+    stigid@ol7: "010470"
     stigid@rhel6: "000236"
     srg@rhel6: SRG-OS-000106
     disa@rhel6: 765,766

diff --git a/linux_os/guide/services/ssh/ssh_server/sshd_allow_only_protocol2/rule.yml b/linux_os/guide/services/ssh/ssh_server/sshd_allow_only_protocol2/rule.yml
@@ -23,6 +23,7 @@ identifiers:
     cce@rhel8: 80894-9
 
 references:
+    stigid@ol7: "040390"
     anssi: NT007(R1)
     stigid@rhel6: "000227"
     srg@rhel6: SRG-OS-000112

diff --git a/linux_os/guide/services/ssh/ssh_server/sshd_disable_compression/rule.yml b/linux_os/guide/services/ssh/ssh_server/sshd_disable_compression/rule.yml
@@ -23,6 +23,7 @@ identifiers:
     cce@rhel8: 80895-6
 
 references:
+    stigid@ol7: "040470"
     cui: 3.1.12
     disa: "366"
     hipaa: 164.308(a)(4)(i),164.308(b)(1),164.308(b)(3),164.310(b),164.312(e)(1),164.312(e)(2)(ii)

diff --git a/linux_os/guide/services/ssh/ssh_server/sshd_disable_empty_passwords/rule.yml b/linux_os/guide/services/ssh/ssh_server/sshd_disable_empty_passwords/rule.yml
@@ -24,6 +24,7 @@ identifiers:
     cce@rhel8: 80896-4
 
 references:
+    stigid@ol7: "010300"
     anssi: NT007(R17)
     stigid@rhel6: "000239"
     srg@rhel6: SRG-OS-000106
@@ -32,12 +33,12 @@ references:
     cis@rhel8: 5.2.11
     cjis: 5.5.6
     cui: 3.1.1,3.1.5
-    disa: "366"
+    disa: 366,766
     hipaa: 164.308(a)(4)(i),164.308(b)(1),164.308(b)(3),164.310(b),164.312(e)(1),164.312(e)(2)(ii)
     nist: AC-17(a),CM-7(a),CM-7(b),CM-6(a)
     nist-csf: PR.AC-4,PR.AC-6,PR.DS-5,PR.IP-1,PR.PT-3
     ospp: FIA_AFL.1
-    srg: SRG-OS-000480-GPOS-00229
+    srg: SRG-OS-000106-GPOS-00053,SRG-OS-000480-GPOS-00229
     vmmsrg: SRG-OS-000480-VMM-002000
     stigid@rhel7: "010300"
     stigid@sle12: "030150"

diff --git a/linux_os/guide/services/ssh/ssh_server/sshd_disable_gssapi_auth/rule.yml b/linux_os/guide/services/ssh/ssh_server/sshd_disable_gssapi_auth/rule.yml
@@ -20,8 +20,9 @@ identifiers:
     cce@rhel8: 80897-2
 
 references:
+    stigid@ol7: "040430"
     cui: 3.1.12
-    disa: 368,318,1812,1813,1814
+    disa: 318,368,1812,1813,1814
     hipaa: 164.308(a)(4)(i),164.308(b)(1),164.308(b)(3),164.310(b),164.312(e)(1),164.312(e)(2)(ii)
     nist: CM-7(a),CM-7(b),CM-6(a),AC-17(a)
     nist-csf: PR.IP-1

diff --git a/linux_os/guide/services/ssh/ssh_server/sshd_disable_kerb_auth/rule.yml b/linux_os/guide/services/ssh/ssh_server/sshd_disable_kerb_auth/rule.yml
@@ -21,8 +21,9 @@ identifiers:
     cce@rhel8: 80898-0
 
 references:
+    stigid@ol7: "040440"
     cui: 3.1.12
-    disa: 368,318,1812,1813,1814
+    disa: 318,368,1812,1813,1814
     hipaa: 164.308(a)(4)(i),164.308(b)(1),164.308(b)(3),164.310(b),164.312(e)(1),164.312(e)(2)(ii)
     nist: AC-17(a),CM-7(a),CM-7(b),CM-6(a)
     nist-csf: PR.IP-1

diff --git a/linux_os/guide/services/ssh/ssh_server/sshd_disable_rhosts/rule.yml b/linux_os/guide/services/ssh/ssh_server/sshd_disable_rhosts/rule.yml
@@ -24,6 +24,7 @@ identifiers:
     cce@ocp4: 82665-1
 
 references:
+    stigid@ol7: "040350"
     stigid@rhel6: "000234"
     srg@rhel6: SRG-OS-000106
     disa@rhel6: 765,766

diff --git a/linux_os/guide/services/ssh/ssh_server/sshd_disable_rhosts_rsa/rule.yml b/linux_os/guide/services/ssh/ssh_server/sshd_disable_rhosts_rsa/rule.yml
@@ -22,6 +22,7 @@ identifiers:
     cce@rhel8: 80900-4
 
 references:
+    stigid@ol7: "040330"
     cui: 3.1.12
     disa: "366"
     hipaa: 164.308(a)(4)(i),164.308(b)(1),164.308(b)(3),164.310(b),164.312(e)(1),164.312(e)(2)(ii)

diff --git a/linux_os/guide/services/ssh/ssh_server/sshd_disable_root_login/rule.yml b/linux_os/guide/services/ssh/ssh_server/sshd_disable_root_login/rule.yml
@@ -24,6 +24,7 @@ identifiers:
     cce@rhel8: 80901-2
 
 references:
+    stigid@ol7: "040370"
     anssi: NT007(R21)
     stigid@rhel6: "000237"
     srg@rhel6: SRG-OS-000109
@@ -37,7 +38,7 @@ references:
     nist: AC-6(2),AC-17(a),IA-2,IA-2(5),CM-7(a),CM-7(b),CM-6(a),
     nist-csf: PR.AC-1,PR.AC-4,PR.AC-6,PR.AC-7,PR.DS-5,PR.PT-3
     ospp: FIA_AFL.1
-    srg: SRG-OS-000480-GPOS-00227,SRG-OS-000109-GPOS-00056
+    srg: SRG-OS-000109-GPOS-00056,SRG-OS-000480-GPOS-00227
     vmmsrg: SRG-OS-000480-VMM-002000
     stigid@rhel7: "040370"
     stigid@sle12: "030140"

diff --git a/linux_os/guide/services/ssh/ssh_server/sshd_disable_user_known_hosts/rule.yml b/linux_os/guide/services/ssh/ssh_server/sshd_disable_user_known_hosts/rule.yml
@@ -22,6 +22,7 @@ identifiers:
     cce@rhel8: 80902-0
 
 references:
+    stigid@ol7: "040380"
     cui: 3.1.12
     disa: "366"
     hipaa: 164.308(a)(4)(i),164.308(b)(1),164.308(b)(3),164.310(b),164.312(e)(1),164.312(e)(2)(ii)

diff --git a/linux_os/guide/services/ssh/ssh_server/sshd_do_not_permit_user_env/rule.yml b/linux_os/guide/services/ssh/ssh_server/sshd_do_not_permit_user_env/rule.yml
@@ -20,6 +20,7 @@ identifiers:
     cce@rhel8: 80903-8
 
 references:
+    stigid@ol7: "010460"
     stigid@rhel6: "000241"
     srg@rhel6: SRG-OS-000242
     disa@rhel6: '1414'

diff --git a/linux_os/guide/services/ssh/ssh_server/sshd_enable_strictmodes/rule.yml b/linux_os/guide/services/ssh/ssh_server/sshd_enable_strictmodes/rule.yml
@@ -20,6 +20,7 @@ identifiers:
     cce@rhel8: 80904-6
 
 references:
+    stigid@ol7: "040450"
     cui: 3.1.12
     disa: "366"
     hipaa: 164.308(a)(4)(i),164.308(b)(1),164.308(b)(3),164.310(b),164.312(e)(1),164.312(e)(2)(ii)

diff --git a/linux_os/guide/services/ssh/ssh_server/sshd_enable_warning_banner/rule.yml b/linux_os/guide/services/ssh/ssh_server/sshd_enable_warning_banner/rule.yml
@@ -23,6 +23,7 @@ identifiers:
     cce@rhel8: 80905-3
 
 references:
+    stigid@ol7: "040170"
     stigid@rhel6: "000240"
     srg@rhel6: SRG-OS-000023
     cis@rhel7: 5.2.15

diff --git a/linux_os/guide/services/ssh/ssh_server/sshd_enable_x11_forwarding/rule.yml b/linux_os/guide/services/ssh/ssh_server/sshd_enable_x11_forwarding/rule.yml
@@ -22,6 +22,7 @@ identifiers:
     cce@rhel8: 82421-9
 
 references:
+    stigid@ol7: "040710"
     cui: 3.1.13
     disa: "366"
     nist: CM-6(a),AC-17(a),AC-17(2)

diff --git a/linux_os/guide/services/ssh/ssh_server/sshd_print_last_log/rule.yml b/linux_os/guide/services/ssh/ssh_server/sshd_print_last_log/rule.yml
@@ -20,6 +20,7 @@ identifiers:
     cce@rhel8: 82281-7
 
 references:
+    stigid@ol7: "040360"
     stigid@rhel6: "000507"
     srg@rhel6: SRG-OS-000025
     disa@rhel6: '52'

diff --git a/linux_os/guide/services/ssh/ssh_server/sshd_set_idle_timeout/rule.yml b/linux_os/guide/services/ssh/ssh_server/sshd_set_idle_timeout/rule.yml
@@ -31,6 +31,7 @@ identifiers:
     cce@ocp4: 82549-7
 
 references:
+    stigid@ol7: "040320"
     stigid@rhel6: "000230"
     srg@rhel6: SRG-OS-000163
     disa@rhel6: '879'
@@ -42,7 +43,7 @@ references:
     nist: CM-6(a),AC-17(a),AC-2(5),AC-12,AC-17(a),SC-10,CM-6(a)
     nist-csf: DE.CM-1,DE.CM-3,PR.AC-1,PR.AC-4,PR.AC-6,PR.AC-7,PR.IP-2
     pcidss: Req-8.1.8
-    srg: SRG-OS-000163-GPOS-00072,SRG-OS-000279-GPOS-00109,SRG-OS-000126-GPOS-00066,SRG-OS-000395-GPOS-00175
+    srg: SRG-OS-000126-GPOS-00066,SRG-OS-000163-GPOS-00072,SRG-OS-000279-GPOS-00109,SRG-OS-000395-GPOS-00175
     vmmsrg: SRG-OS-000480-VMM-002000
     stigid@rhel7: "040320"
     stigid@sle12: "030190"

diff --git a/linux_os/guide/services/ssh/ssh_server/sshd_set_keepalive/rule.yml b/linux_os/guide/services/ssh/ssh_server/sshd_set_keepalive/rule.yml
@@ -20,6 +20,7 @@ identifiers:
     cce@ocp4: 82464-9
 
 references:
+    stigid@ol7: "040340"
     stigid@rhel6: "000231"
     srg@rhel6: SRG-OS-000126
     disa@rhel6: '879'

diff --git a/linux_os/guide/services/ssh/ssh_server/sshd_use_approved_ciphers/rule.yml b/linux_os/guide/services/ssh/ssh_server/sshd_use_approved_ciphers/rule.yml
@@ -52,17 +52,18 @@ identifiers:
     cce@rhel8: 81032-5
 
 references:
+    stigid@ol7: "040110"
     stigid@rhel6: "000243"
     srg@rhel6: SRG-OS-000169
     disa@rhel6: 1144,1145,1146
     cis: 5.2.10
     cjis: 5.5.6
     cui: 3.1.13,3.13.11,3.13.8
-    disa: 68,366,803
+    disa: 68,366,803,877,2890,3123
     hipaa: 164.308(b)(1),164.308(b)(2),164.312(e)(1),164.312(e)(2)(i),164.312(e)(2)(ii),164.314(b)(2)(i)
     nist: CM-6(a),AC-17(a),AC-17(2),SC-13,MA-4(6),IA-5(1)(c),SC-12(2),SC-12(3)
     nist-csf: PR.AC-1,PR.AC-3,PR.AC-4,PR.AC-6,PR.AC-7,PR.IP-1,PR.PT-1,PR.PT-3,PR.PT-4
-    srg: SRG-OS-000033-GPOS-00014,SRG-OS-000120-GPOS-00061,SRG-OS-000125-GPOS-00065,SRG-OS-000250-GPOS-00093,SRG-OS-000393-GPOS-00173
+    srg: SRG-OS-000033-GPOS-00014,SRG-OS-000120-GPOS-00061,SRG-OS-000125-GPOS-00065,SRG-OS-000250-GPOS-00093,SRG-OS-000393-GPOS-00173,SRG-OS-000394-GPOS-00174
     vmmsrg: SRG-OS-000033-VMM-000140,SRG-OS-000120-VMM-000600,SRG-OS-000478-VMM-001980,SRG-OS-000396-VMM-001590
     stigid@rhel7: "040110"
     isa-62443-2013: 'SR 1.1,SR 1.10,SR 1.11,SR 1.12,SR 1.13,SR 1.2,SR 1.3,SR 1.4,SR 1.5,SR 1.6,SR 1.7,SR 1.8,SR 1.9,SR 2.1,SR 2.10,SR 2.11,SR 2.12,SR 2.2,SR 2.3,SR 2.4,SR 2.5,SR 2.6,SR 2.7,SR 2.8,SR 2.9,SR 3.1,SR 3.5,SR 3.8,SR 4.1,SR 4.3,SR 5.1,SR 5.2,SR 5.3,SR 7.1,SR 7.6'