V3R15 changes
Red Hat Enterprise Linux 7 SCAP Benchmark V3R15 (2024-05-30) replaced V3R14 (2023-12-01): 1 rule updated. It has 161 rules, against 161 in V3R14.
V3R15 benchmarkV3R14 benchmark Compare V3R14 and V3R15 in SCAP Compare
- 0 added
- 0 removed
- 1 updated
Updated fields: Check text 1Discussion 1
Updated in V3R15 (1)
V-204458CAT IThe Red Hat Enterprise Linux operating system must be a vendor supported release.Check text, Discussion
Check text
AND
OR
- RHELThe 7 Client is installed
rpminfo_test (check: all, existence: at_least_one_exists)
object rpminfo_object: name equals "redhat-release-client"
state rpminfo_state:package version pattern match "^7.*$"
- RHEL 7 Workstation is installed
rpminfo_test (check: all, existence: at_least_one_exists)
object rpminfo_object: name equals "redhat-release-workstation"
state rpminfo_state: version pattern match "^7.*$"
- RHEL 7 Server is installed
rpminfo_test (check: all, existence: at_least_one_existsall_exist)
object rpminfo_object: name equals "redhat-release-server"
state rpminfo_state: version pattern match "^7.*$"
- RHEL 7 Compute Node is installed
rpminfo_test (check: all, existence: at_least_one_exists)
object rpminfo_object: name equals "redhat-release-computenode"
state rpminfo_state: version pattern match "^7.*$"
AND
- redhat-release-(client|workstation|server|computenode|virtualization-host RPM package is installed
rpminfo_test (check: all, existence: only_one_exists)
object rpminfo_object: name equals "redhat-release-virtualization-host"
- state Red Hat Enterpise Virtualization Host is based on RHEL 7
textfilecontent54_test (checkrpminfo_state: all,version existence: )
object textfilecontent54_object: filepath equals "/etc/redhat-release"; pattern pattern match "^Red Hat Enterprise Linux release (7\\d)\\.\\d+$"; instance greater than or equal "1"
state textfilecontent54_state: subexpression pattern match "7"
- Supported RHEL7 minor version
textfilecontent54_test (check: all, existence: )
object textfilecontent54_object: filepath equals "/etc/redhat-release"; pattern pattern match "^Red Hat Enterprise Linux.*release\\s+(\\S+)\\s+"; instance greater than or equal "1"
state textfilecontent54_state: subexpression equals "7.9"
Verify the version of the operating system is vendor supported.
Check the version of the operating system with the following command:
# cat /etc/redhat-release
Red Hat Enterprise Linux Server release 7.9 (Maipo)
Current End of Extended Update Support for RHEL 7.6 is 31 May 2021.
Current End of Extended Update Support for RHEL 7.7 is 30 August 2021.
Current End of Maintenance Support for RHEL 7.9 is 30 June 2024.
If the release is not supported by the vendor, this is a finding.
Discussion
An operating system release is considered "supported" if the vendor continues to provide security patches for the product. With an unsupported release, it will not be possible to resolve security issues discovered in the system software.
Red Hat offers the Extended Update Support (EUS) Add-On to a Red Hat Enterprise Linux subscription, for a fee, for those customers who wish to standardize on a specific minor release for an extended period. RHEL 7.7 marks the final minor release that EUS will be available, while 7.9 is the final minor release overall.
How these changes are found
Rules are matched across the two benchmark releases by their STIG V-number. A rule counts as updated when its rule id changed and its title, severity, discussion, fix text or OVAL check logic changed — the same comparison SCAP Compare makes.
Comparing other releases, or this one against an older release? Pick any two in SCAP Compare.