Home
Security Hardening
DISA SLES 15 STIG V1R3

DISA SLES 15 STIG V1R3

SLES-15-010140 – The SUSE operating system must conceal, via the session lock, information previously visible on the display with a publicly viewable image in the graphical user interface (GUI) – GUI.
Details A session lock is a temporary action taken when a user stops work and moves away from the immediate...
SLES-15-010150 – The SUSE operating system must log SSH connection attempts and failures to the server – LogLevel
Details Remote access services, such as those providing remote access to network devices and information systems, which lack automated monitoring...
SLES-15-010160 – The SUSE operating system must implement DoD-approved encryption to protect the confidentiality of SSH remote connections.
Details Without confidentiality protection mechanisms, unauthorized individuals may gain access to sensitive information via a remote access session. Remote access...
SLES-15-010170 – The SUSE operating system, for PKI-based authentication, must validate certificates by constructing a certification path (which includes status information) to an accepted trust anchor.
Details Without path validation, an informed trust decision by the relying party cannot be made when presented with any certificate...
SLES-15-010180 – The SUSE operating system must not have the telnet-server package installed.
Details It is detrimental for SUSE operating systems to provide, or install by default, functionality exceeding requirements or mission objectives....
SLES-15-010190 – SUSE operating systems with a basic input/output system (BIOS) must require authentication upon booting into single-user and maintenance modes.
Details To mitigate the risk of unauthorized access to sensitive information by entities that have been issued certificates by DoD-approved...
SLES-15-010200 – SUSE operating systems with Unified Extensible Firmware Interface (UEFI) implemented must require authentication upon booting into single-user mode and maintenance.
Details If the system allows a user to boot into single-user or maintenance mode without authentication, any user that invokes...
SLES-15-010220 – The SUSE operating system must be configured to prohibit or restrict the use of functions, ports, protocols, and/or services as defined in the Ports, Protocols, and Services Management (PPSM) Category Assignments List (CAL) and vulnerability assessments – active
Details To prevent unauthorized connection of devices, unauthorized transfer of information, or unauthorized tunneling (i.e., embedding of data types within...
SLES-15-010220 – The SUSE operating system must be configured to prohibit or restrict the use of functions, ports, protocols, and/or services as defined in the Ports, Protocols, and Services Management (PPSM) Category Assignments List (CAL) and vulnerability assessments – enabled
Details To prevent unauthorized connection of devices, unauthorized transfer of information, or unauthorized tunneling (i.e., embedding of data types within...
SLES-15-010090 – The SUSE operating system must display the approved Standard Mandatory DoD Notice before granting local or remote access to the system via a graphical user logon.
Details Display of a standardized and approved use notification before granting access to the SUSE operating system ensures privacy and...

Prev Next

DISA SLES 15 STIG V1R3

SLES-15-010140 – The SUSE operating system must conceal, via the session lock, information previously visible on the display with a publicly viewable image in the graphical user interface (GUI) – GUI.

SLES-15-010150 – The SUSE operating system must log SSH connection attempts and failures to the server – LogLevel

SLES-15-010160 – The SUSE operating system must implement DoD-approved encryption to protect the confidentiality of SSH remote connections.

SLES-15-010170 – The SUSE operating system, for PKI-based authentication, must validate certificates by constructing a certification path (which includes status information) to an accepted trust anchor.

SLES-15-010180 – The SUSE operating system must not have the telnet-server package installed.

SLES-15-010190 – SUSE operating systems with a basic input/output system (BIOS) must require authentication upon booting into single-user and maintenance modes.

SLES-15-010200 – SUSE operating systems with Unified Extensible Firmware Interface (UEFI) implemented must require authentication upon booting into single-user mode and maintenance.

SLES-15-010220 – The SUSE operating system must be configured to prohibit or restrict the use of functions, ports, protocols, and/or services as defined in the Ports, Protocols, and Services Management (PPSM) Category Assignments List (CAL) and vulnerability assessments – active

SLES-15-010220 – The SUSE operating system must be configured to prohibit or restrict the use of functions, ports, protocols, and/or services as defined in the Ports, Protocols, and Services Management (PPSM) Category Assignments List (CAL) and vulnerability assessments – enabled

SLES-15-010090 – The SUSE operating system must display the approved Standard Mandatory DoD Notice before granting local or remote access to the system via a graphical user logon.