Oracle Linux 6 Security Technical Implementation Guide

The Oracle Linux 6 Security Technical Implementation Guide (V2 R7) has 267 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

267STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V2 · R7

CurrentPublished Thu Jan 26 2023

The system must use a Linux Security Module configured to enforce limits on system services.

Oracle Linux 6 Security Technical Implementation Guide

Assessment Title

Rule Text

The system must use a Linux Security Module configured to enforce limits on system services.

Description

Discussion Text

Setting the SELinux state to enforcing ensures SELinux is able to confine potentially compromised processes to the security policy, which is designed to prevent them from causing damage to the system or further elevating their privileges.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-208801

Rule

SV-208801r793586_rule

Severity

medium

Rule Version

OL6-00-000020

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

Check the file "/etc/selinux/config" and ensure the following line appears:

SELINUX=enforcing

If SELINUX is not set to enforcing, this is a finding.

Implementation Procedure

Fix Text

The SELinux state should be set to "enforcing" at system boot time. In the file "/etc/selinux/config", add or correct the following line to configure the system to boot into enforcing mode:

SELINUX=enforcing

STIG check 9 of 267 in the Oracle Linux 6 STIG checklist

← Previous · V-208800A file integrity baseline must be created.Next · V-208802 →The system must use a Linux Security Module configured to limit the privileges of system services.