Details

The operating system must be a vendor supported release.

Rationale:

An operating system release is considered ‘supported’ if the vendor continues to provide security patches for the product. With an unsupported release, it will not be possible to resolve security issues discovered in the system software.

NOTE: Nessus has provided the target output to assist in reviewing the benchmark to ensure target compliance.

Solution

Upgrade to a supported version of the operating system.

Notes:

This Benchmark recommendation maps to:

Red Hat Enterprise Linux 7 Security Technical Implementation Guide

Version 2, Release: 3 Benchmark Date: 26 Apr 2019

Vul ID: V-71997

Rule ID: SV-86621r4_rule

STIG ID: RHEL-07-020250

Severity: CAT I

Supportive Information

The following resource is also helpful.

• https://workbench.cisecurity.org/files/2688

This security hardening control applies to the following category of controls within NIST 800-53: System and Information Integrity.This control applies to the following type of system Unix.

References

• 800-53|SI-2d.

Source

• Tenable.com/audits