V3R5 changes
Oracle Linux 7 STIG V3R5 (2026-01-05) replaced V3R4 (2025-10-01): 1 check updated. It has 243 checks, against 243 in V3R4.
V3R5 checklistV3R4 checklist Compare V3R4 and V3R5 in STIG Compare
- 0 added
- 0 removed
- 1 updated
Updated fields: Check text 1Fix text 1
Updated in V3R5 (1)
V-221704CAT IOracle Linux 7 must not install packages from the Extra Packages for Enterprise Linux (EPEL) repository.Check text, Fix text
Check text
Verify that OL 7 is not able to install packages from the EPEL with the following command:
$# dnfyum repolist
If anyenabled repositories| containinggrep the-i word 'epel'
If inany theoutput nameis existreturned, this is a finding.
Fix text
TheConfigure repoOL7 packageto cannot behave manuallyaccess removedto with the followingEPEL command:repo.
$Remove sudo dnf remove epel-release
Configure OL 7 to disable use of the EPELrepo repository with the following command:
$# sudoyum dnfremove configoracle-manager epel-release-set-disabled epelel7
How these changes are found
Checks are matched across the two releases by V-number. A check counts as updated when DISA gave it a new rule revision (the r number in its SV-…_rule id) and its title, severity, check text, fix text, discussion, CCIs or other fields changed — the same comparison STIG Compare makes. Added checks are new V-numbers; removed checks are V-numbers V3R5 no longer has.
Comparing other releases, or this one against an older release? Pick any two in STIG Compare.