<html><body>
<p><font size="4" color="#4F4F4F" face="Calibri"><b>IBM Endpoint Manager for Security and Compliance </b></font><br>
<br>
<font size="4" color="#4F4F4F" face="Calibri"><b>Security Configuration Management (SCM)</b></font><br>
<font size="3" color="#2F2F2F" face="Calibri"> </font><br>
<font size="3" color="#2F2F2F" face="Calibri">The Security and Compliance team at IBM has updated the content in the following sites. See details below:</font><br>
<font size="3" color="#2F2F2F" face="Calibri"> </font><br>
<font size="3" color="#2F2F2F" face="Calibri"><b><u>Updated Sites:<br>
</u></b></font>
<table border="1">
<tr valign="top"><td width="16"><img width="1" height="1" src="cid:1__=08BBF4E0DFFEB8808f9e8a93df938@us.ibm.com" border="0" alt=""></td><td width="334"><div align="center"><font size="3" face="Calibri"><b>Site Name</b></font></div></td><td width="82"><div align="center"><font size="3" face="Calibri"><b>Site Version</b></font></div></td></tr>
<tr valign="top"><td width="16">
<ul style="padding-left: 5pt"><font size="3" face="Calibri">1</font></ul>
</td><td width="334">
<ul style="padding-left: 5pt"><font size="3" face="serif">DISA STIG Checklist for RHEL 5 - RG03</font></ul>
</td><td width="82"><div align="center"><font size="3" face="Calibri">12</font></div></td></tr>
<tr valign="top"><td width="16">
<ul style="padding-left: 5pt"><font size="3" face="Calibri">2</font></ul>
</td><td width="334">
<ul style="padding-left: 5pt"><font size="3" face="serif">SCM Checklist for DISA STIG on RHEL 5 - RG03</font></ul>
</td><td width="82"><div align="center"><font size="3" face="Calibri">11</font></div></td></tr>
</table>
<br>
<font size="3" color="#2F2F2F" face="Calibri"><b><u>Changelist: </u></b></font><br>
<font size="3" color="#2F2F2F" face="Calibri">The DISA Red Hat 5 content was refreshed to Version 1, Release 10.</font><br>
<font size="3" color="#2F2F2F" face="Calibri">The following Fixlets were updated:</font>
<ul style="padding-left: 54pt"><font size="3" color="#2F2F2F" face="Calibri">GEN001025 added</font><br>
<font size="3" color="#2F2F2F" face="Calibri">GEN005527 added</font><br>
<font size="3" color="#2F2F2F" face="Calibri">GEN000560 No longer also looks at /etc/pam.d/system-auth-ac (because </font><br>
<font size="3" color="#2F2F2F" face="Calibri">/etc/pam.d/system-auth is a symlink to it)</font><br>
<font size="3" color="#2F2F2F" face="Calibri">GEN001300 Now only looks at regular files</font><br>
<font size="3" color="#2F2F2F" face="Calibri">GEN000241 Now checks /etc/cron.*/* instead of just /etc/cron.daily/*, </font><br>
<font size="3" color="#2F2F2F" face="Calibri">and also checks maxpoll setting in /etc/ntp.conf</font><br>
<font size="3" color="#2F2F2F" face="Calibri">GEN001100 Now checks syslog authpriv logfiles instead of /usr/bin/last </font><br>
<font size="3" color="#2F2F2F" face="Calibri">output</font><br>
<font size="3" color="#2F2F2F" face="Calibri">GEN001260 Now uses globalfind to check entire log directory trees</font><br>
<font size="3" color="#2F2F2F" face="Calibri">GEN001280 Added user changeable parameters</font><br>
<font size="3" color="#2F2F2F" face="Calibri">GEN001940 Now looks at all files in user top level directories, not just </font><br>
<font size="3" color="#2F2F2F" face="Calibri">dotfiles</font><br>
<font size="3" color="#2F2F2F" face="Calibri">GEN002140 Added check for bad shells in /etc/shells</font><br>
<font size="3" color="#2F2F2F" face="Calibri">GEN002280 Added /dev/log to devices to exclude</font><br>
<font size="3" color="#2F2F2F" face="Calibri">GEN002360 Added audio to list of allowed groups</font><br>
<font size="3" color="#2F2F2F" face="Calibri">GEN002960 The user should disable this check if only the root user is </font><br>
<font size="3" color="#2F2F2F" face="Calibri">permitted to use cron</font><br>
<font size="3" color="#2F2F2F" face="Calibri">GEN003160 Now gets cron logfile name from SYSLOG_CONF file parameter </font><br>
<font size="3" color="#2F2F2F" face="Calibri">cron entry</font><br>
<font size="3" color="#2F2F2F" face="Calibri">GEN003180 Now gets cron logfile name from SYSLOG_CONF file parameter </font><br>
<font size="3" color="#2F2F2F" face="Calibri">cron entry</font><br>
<font size="3" color="#2F2F2F" face="Calibri">GEN003190 Now gets cron logfile name from SYSLOG_CONF file parameter </font><br>
<font size="3" color="#2F2F2F" face="Calibri">cron entry</font><br>
<font size="3" color="#2F2F2F" face="Calibri">GEN003660 The path to syslog.conf or rsyslog.conf is now a parameter and </font><br>
<font size="3" color="#2F2F2F" face="Calibri">is exposed to the user</font><br>
<font size="3" color="#2F2F2F" face="Calibri">GEN004460 Exposed CONFIG_FILE parameter to users for path to syslog.conf </font><br>
<font size="3" color="#2F2F2F" face="Calibri">or rsyslog.conf</font><br>
<font size="3" color="#2F2F2F" face="Calibri">GEN004480 Exposed CONFIG_FILE parameter to users for path to syslog.conf </font><br>
<font size="3" color="#2F2F2F" face="Calibri">or rsyslog.conf</font><br>
<font size="3" color="#2F2F2F" face="Calibri">GEN004500 Exposed CONFIG_FILE parameter to users for path to syslog.conf </font><br>
<font size="3" color="#2F2F2F" face="Calibri">or rsyslog.conf</font><br>
<font size="3" color="#2F2F2F" face="Calibri">GEN004510 Exposed ACL_FILE parameter to users for path to syslog.conf or </font><br>
<font size="3" color="#2F2F2F" face="Calibri">rsyslog.conf</font><br>
<font size="3" color="#2F2F2F" face="Calibri">GEN005390 Exposed CONFIG_FILE parameter to users for path to syslog.conf </font><br>
<font size="3" color="#2F2F2F" face="Calibri">or rsyslog.conf</font><br>
<font size="3" color="#2F2F2F" face="Calibri">GEN005395 Exposed ACL_FILE parameter to users for path to syslog.conf or </font><br>
<font size="3" color="#2F2F2F" face="Calibri">rsyslog.conf</font><br>
<font size="3" color="#2F2F2F" face="Calibri">GEN005400 Exposed CONFIG_FILE parameter to users for path to syslog.conf </font><br>
<font size="3" color="#2F2F2F" face="Calibri">or rsyslog.conf</font><br>
<font size="3" color="#2F2F2F" face="Calibri">GEN005420 Exposed CONFIG_FILE parameter to users for path to syslog.conf </font><br>
<font size="3" color="#2F2F2F" face="Calibri">or rsyslog.conf</font><br>
<font size="3" color="#2F2F2F" face="Calibri">GEN005450 The path to syslog.conf or rsyslog.conf is now a parameter and </font><br>
<font size="3" color="#2F2F2F" face="Calibri">is exposed to the user</font><br>
<font size="3" color="#2F2F2F" face="Calibri">GEN006600 The path to syslog.conf or rsyslog.conf is now a parameter and </font><br>
<font size="3" color="#2F2F2F" face="Calibri">is exposed to the user</font><br>
<font size="3" color="#2F2F2F" face="Calibri">GEN008050 Now only applies if ldap is used in /etc/nsswitch.conf</font><br>
</ul>
<font size="3" color="#2F2F2F" face="Calibri"><b>*Site versions provided for air-gap customers.</b></font><br>
<br>
<font size="3" face="Calibri"><b>We hope you find this latest release of SCM content useful and effective. Thank you!</b></font><br>
<br>
<font size="3" face="Calibri"><i> -- The IBM Endpoint Manager for Security and Compliance</i></font><font size="2" face="Calibri"><br>
</font></body></html>