<html><body>
<p><font size="4" color="#4F4F4F" face="Calibri"><b>IBM Endpoint Manager for Security and Compliance </b></font><br>
<br>
<font size="4" color="#4F4F4F" face="Calibri"><b>Security Configuration Management (SCM)</b></font><br>
<font size="3" color="#2F2F2F" face="Calibri"> </font><br>
<font size="3" color="#2F2F2F" face="Calibri">The Security and Compliance team at IBM has updated the content in the following sites. See details below:</font><br>
<font size="3" color="#2F2F2F" face="Calibri"> </font><br>
<font size="3" color="#2F2F2F" face="Calibri"><b><u>Updated Sites:<br>
</u></b></font>
<table border="1">
<tr valign="top"><td width="16"><img width="1" height="1" src="cid:1__=08BBF4C9DFB883D28f9e8a93df938@us.ibm.com" border="0" alt=""></td><td width="373"><div align="center"><font size="3" face="Calibri"><b>Site Name</b></font></div></td><td width="161"><div align="center"><font size="3" face="Calibri"><b>Site Version</b></font></div></td></tr>
<tr valign="top"><td width="16">
<ul style="padding-left: 5pt"><font size="3" face="Calibri">1</font></ul>
</td><td width="373">
<ul style="padding-left: 5pt"><font size="3" face="serif">DISA STIG Checklist for RHEL 6 - RG03</font></ul>
</td><td width="161"><div align="center"><font size="3" face="Calibri">12</font></div></td></tr>
<tr valign="top"><td width="16">
<ul style="padding-left: 5pt"><font size="3" face="Calibri">2</font></ul>
</td><td width="373">
<ul style="padding-left: 5pt"><font size="3" face="serif">SCM Checklist for DISA STIG on RHEL 6 - RG03</font></ul>
</td><td width="161"><div align="center"><font size="3" face="Calibri">8</font></div></td></tr>
</table>
<br>
<br>
<font size="3" color="#2F2F2F" face="Calibri"><b><u>Changelist: </u></b></font><br>
<font size="3" color="#2F2F2F" face="Calibri">The DISA Red Hat 6 content was refreshed to version 1, release 7.</font><br>
<font size="3" color="#2F2F2F" face="Calibri">The following Fixlets were updated:</font>
<ul style="padding-left: 54pt"><font size="3" color="#2F2F2F" face="Calibri">RHEL-06-000005: Added customer-editable parameter PARAM_VALUE</font><br>
<font size="3" color="#2F2F2F" face="Calibri">RHEL-06-000008: Now checks for particular gpg pubkeys</font><br>
<font size="3" color="#2F2F2F" face="Calibri">RHEL-06-000030: No longer looks at /etc/pam.d/system-auth-ac</font><br>
<font size="3" color="#2F2F2F" face="Calibri">RHEL-06-000045: Now only looks at regular files</font><br>
<font size="3" color="#2F2F2F" face="Calibri">RHEL-06-000047: Now only looks at regular files</font><br>
<font size="3" color="#2F2F2F" face="Calibri">RHEL-06-000061: Now looks at system-auth and password-auth instead of system-auth-ac and password-auth-ac</font><br>
<font size="3" color="#2F2F2F" face="Calibri">RHEL-06-000062: Now looks for the setting in all files in /etc/pam.d/ directory</font><br>
<font size="3" color="#2F2F2F" face="Calibri">RHEL-06-000133: Added EXCLUDES parameter for files to exclude</font><br>
<font size="3" color="#2F2F2F" face="Calibri">RHEL-06-000134: Added EXCLUDES parameter for files to exclude</font><br>
<font size="3" color="#2F2F2F" face="Calibri">RHEL-06-000135: Added EXCLUDES parameter for files to exclude</font><br>
<font size="3" color="#2F2F2F" face="Calibri">RHEL-06-000165: Now looks in audit.rules instead of running auditctl</font><br>
<font size="3" color="#2F2F2F" face="Calibri">RHEL-06-000167: Now looks in audit.rules instead of running auditctl</font><br>
<font size="3" color="#2F2F2F" face="Calibri">RHEL-06-000169: Now looks in audit.rules instead of running auditctl</font><br>
<font size="3" color="#2F2F2F" face="Calibri">RHEL-06-000171: Now looks in audit.rules instead of running auditctl</font><br>
<font size="3" color="#2F2F2F" face="Calibri">RHEL-06-000184: Now looks in audit.rules instead of running auditctl</font><br>
<font size="3" color="#2F2F2F" face="Calibri">RHEL-06-000185: Now looks in audit.rules instead of running auditctl</font><br>
<font size="3" color="#2F2F2F" face="Calibri">RHEL-06-000188: Now looks in audit.rules instead of running auditctl</font><br>
<font size="3" color="#2F2F2F" face="Calibri">RHEL-06-000189: Now looks in audit.rules instead of running auditctl</font><br>
<font size="3" color="#2F2F2F" face="Calibri">RHEL-06-000190: Now looks in audit.rules instead of running auditctl</font><br>
<font size="3" color="#2F2F2F" face="Calibri">RHEL-06-000191: Now looks in audit.rules instead of running auditctl</font><br>
<font size="3" color="#2F2F2F" face="Calibri">RHEL-06-000192: Now looks in audit.rules instead of running auditctl</font><br>
<font size="3" color="#2F2F2F" face="Calibri">RHEL-06-000193: Now looks in audit.rules instead of running auditctl</font><br>
<font size="3" color="#2F2F2F" face="Calibri">RHEL-06-000194: Now looks in audit.rules instead of running auditctl</font><br>
<font size="3" color="#2F2F2F" face="Calibri">RHEL-06-000195: Now looks in audit.rules instead of running auditctl</font><br>
<font size="3" color="#2F2F2F" face="Calibri">RHEL-06-000196: Now looks in audit.rules instead of running auditctl</font><br>
<font size="3" color="#2F2F2F" face="Calibri">RHEL-06-000199: Now looks in audit.rules instead of running auditctl</font><br>
<font size="3" color="#2F2F2F" face="Calibri">RHEL-06-000200: Now looks in audit.rules instead of running auditctl</font><br>
<font size="3" color="#2F2F2F" face="Calibri">RHEL-06-000202: Now looks in audit.rules instead of running auditctl</font><br>
<font size="3" color="#2F2F2F" face="Calibri">RHEL-06-000282: Added selinuxfs to EXCLUDEFS for globalfind</font><br>
<font size="3" color="#2F2F2F" face="Calibri">RHEL-06-000286: Now looks at /etc/init/control-alt-delete.override</font><br>
<font size="3" color="#2F2F2F" face="Calibri">RHEL-06-000308: Now also checks in /etc/security/limits.d/*.conf</font><br>
<font size="3" color="#2F2F2F" face="Calibri">RHEL-06-000356: Now looks in password-auth instead of password-auth-ac</font><br>
<font size="3" color="#2F2F2F" face="Calibri">RHEL-06-000357: Now also checks /etc/pam.d/password-auth, and uses 900 as default if the setting does not exist</font><br>
<font size="3" color="#2F2F2F" face="Calibri">RHEL-06-000506: Removed</font><br>
<font size="3" color="#2F2F2F" face="Calibri">RHEL-06-000017: Added</font><br>
<font size="3" color="#2F2F2F" face="Calibri">RHEL-06-000018: Added</font><br>
<font size="3" color="#2F2F2F" face="Calibri">RHEL-06-000020: Added</font><br>
<font size="3" color="#2F2F2F" face="Calibri">RHEL-06-000023: Added</font><br>
<font size="3" color="#2F2F2F" face="Calibri">RHEL-06-000025: Added</font><br>
<font size="3" color="#2F2F2F" face="Calibri">RHEL-06-000163: Added</font><br>
<font size="3" color="#2F2F2F" face="Calibri">RHEL-06-000372: Added</font><br>
<font size="3" color="#2F2F2F" face="Calibri">RHEL-06-000528: Added</font><br>
<font size="3" color="#2F2F2F" face="Calibri">RHEL-06-000529: Added</font></ul>
<br>
<font size="3" color="#2F2F2F" face="Calibri"><b>*Site versions provided for air-gap customers.</b></font><br>
<br>
<font size="3" face="Calibri"><b>We hope you find this latest release of SCM content useful and effective. Thank you!</b></font><br>
<br>
<font size="3" face="Calibri"><i> -- The IBM Endpoint Manager for Security and Compliance</i></font><font size="2" face="Calibri"><br>
</font><br>
</body></html>