<div dir="ltr">
<p class="MsoNormal" style="margin:0in 0in 0.0001pt;line-height:normal;font-size:11pt;font-family:Calibri,sans-serif"><b><span style="font-family:Arial,sans-serif;color:black">Product: </span></b><span style="font-family:Arial,sans-serif;color:black"><br>
IBM BigFix Compliance <br>
<br>
<b><br>
Title: </b><br>
Updated CIS Checklist for RHEL 7 </span><span style="font-family:Arial,sans-serif">to
update <span style="color:rgb(47,47,47)">remediation</span> description and compliance
logic.<span></span></span></p>
<p class="MsoNormal" style="margin:0in 0in 0.0001pt;line-height:normal;font-size:11pt;font-family:Calibri,sans-serif"><span style="font-family:Arial,sans-serif"><span> </span></span></p>
<p class="MsoNormal" style="margin:0in 0in 8pt;line-height:107%;font-size:11pt;font-family:Calibri,sans-serif"><b><span style="font-family:Arial,sans-serif;color:black"><br>
Security Benchmark: </span></b><span style="font-family:Arial,sans-serif;color:black"><br>
CIS Red Hat Enterprise Linux 7 Benchmark, v2.1.1 <br>
<b><br>
Published Sites: </b><br>
CIS Checklist for RHEL 7</span><span style="font-family:Arial,sans-serif">,
site version 9<span> </span><span style="color:black"><br>
<i>(The site version is provided for air-gap customers.)</i><br>
<br>
<b><br>
Details:<span></span></b></span></span></p>
<p class="gmail-MsoListParagraphCxSpFirst" style="margin:0in 0in 0.0001pt 0.75in;font-size:12pt;font-family:"Times New Roman",serif"><span style="font-size:11pt;font-family:Arial,sans-serif;color:rgb(47,47,47)"><span> </span></span></p>
<p class="gmail-MsoListParagraphCxSpLast" style="margin:0in 0in 0.0001pt 0.75in;font-size:12pt;font-family:"Times New Roman",serif"><span style="font-size:11pt;font-family:Symbol;color:rgb(47,47,47)"><span>·<span style="font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span></span><span style="font-size:11pt;font-family:Arial,sans-serif;color:rgb(47,47,47)">xccdf_org.cisecurity.benchmarks_rule_6.1.7_Ensure_permissions_on_etcshadow-_are_configured:
Updated remediation description of the fixlet<span></span></span></p>
<p class="MsoNormal" style="margin:0in 0in 8pt;line-height:107%;font-size:11pt;font-family:Calibri,sans-serif"><span style="font-family:Arial,sans-serif;color:rgb(47,47,47)"><span> </span></span></p>
<p class="gmail-MsoListParagraphCxSpFirst" style="margin:0in 0in 0.0001pt 0.75in;font-size:12pt;font-family:"Times New Roman",serif"><span style="font-size:11pt;font-family:Symbol;color:rgb(47,47,47)"><span>·<span style="font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span></span><span style="font-size:11pt;font-family:Arial,sans-serif;color:rgb(47,47,47)">xccdf_org.cisecurity.benchmarks_rule_6.1.9_Ensure_permissions_on_etcgshadow-_are_configured:
Updated remediation description of the fixlet<span></span></span></p>
<p class="gmail-MsoListParagraphCxSpMiddle" style="margin:0in 0in 0.0001pt 0.5in;font-size:12pt;font-family:"Times New Roman",serif"><span style="font-size:11pt;font-family:Arial,sans-serif;color:rgb(47,47,47)"><span> </span></span></p>
<p class="gmail-MsoListParagraphCxSpLast" style="margin:0in 0in 0.0001pt 0.75in;font-size:12pt;font-family:"Times New Roman",serif"><span style="font-size:11pt;font-family:Symbol;color:rgb(47,47,47)"><span>·<span style="font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span></span><span style="font-size:11pt;font-family:Arial,sans-serif;color:rgb(47,47,47)">xccdf_org.cisecurity.benchmarks_rule_4.1.12_Ensure_use_of_privileged_commands_is_collected
: Updated compliance logic of the fixlet<span></span></span></p>
<p class="MsoNormal" style="margin:0in 0in 0.0001pt;line-height:107%;font-size:11pt;font-family:Calibri,sans-serif"><span style="font-family:Arial,sans-serif;color:rgb(47,47,47)"><span> </span></span></p>
<p class="MsoNormal" style="margin:0in 0in 0.0001pt;line-height:107%;font-size:11pt;font-family:Calibri,sans-serif"><span style="font-family:Arial,sans-serif;color:rgb(47,47,47)"><span> </span></span></p>
<p class="MsoNormal" style="margin:0in 0in 0.0001pt;line-height:107%;font-size:11pt;font-family:Calibri,sans-serif"><b><span style="font-family:Arial,sans-serif;color:black">Actions to take:<span></span></span></b></p>
<p class="gmail-MsoListParagraphCxSpFirst" style="margin:6pt 0in 6pt 0.75in;font-size:12pt;font-family:"Times New Roman",serif"><span style="font-size:11pt;font-family:Symbol;color:rgb(47,47,47)"><span>·<span style="font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span></span><span style="font-size:11pt;font-family:Arial,sans-serif;color:rgb(47,47,47)">To subscribe to the above site, you can use the License Overview
Dashboard to enable and gather the site. Note that you must be entitled to the
BigFix Compliance product and you must be using IBM BigFix version 9.2 and
later. <span></span></span></p>
<p class="gmail-MsoListParagraphCxSpMiddle" style="margin:6pt 0in 6pt 0.75in;font-size:12pt;font-family:"Times New Roman",serif"><span style="font-size:11pt;font-family:Arial,sans-serif;color:rgb(47,47,47)"><span> </span></span></p>
<p class="gmail-MsoListParagraphCxSpLast" style="margin:6pt 0in 6pt 0.75in;font-size:12pt;font-family:"Times New Roman",serif"><span style="font-size:11pt;font-family:Symbol;color:rgb(47,47,47)"><span>·<span style="font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span></span><span style="font-size:11pt;font-family:Arial,sans-serif;color:rgb(47,47,47)">If you use custom sites, update your custom sites accordingly to
use the latest content. You can synchronize your content by using the
Synchronize Custom Checks wizard. For more information, see </span><a href="https://ibm.biz/Bd4LBt" style="color:blue;text-decoration:underline"><span style="font-size:11pt;font-family:Arial,sans-serif">https://ibm.biz/Bd4LBt</span></a><span style="font-size:11pt;font-family:Arial,sans-serif;color:rgb(47,47,47)">.<span> </span><span></span></span></p>
<p class="MsoNormal" style="margin:0in 0in 0.0001pt;line-height:107%;font-size:11pt;font-family:Calibri,sans-serif"><span style="font-family:Arial,sans-serif;color:black"><span> </span></span></p>
<p class="MsoNormal" style="margin:0in 0in 0.0001pt;line-height:107%;font-size:11pt;font-family:Calibri,sans-serif"><span style="font-family:Arial,sans-serif;color:black"><span> </span><span></span></span></p>
<p class="MsoNormal" style="margin:0in 0in 0.0001pt;line-height:107%;font-size:11pt;font-family:Calibri,sans-serif"><b><span style="font-family:Arial,sans-serif;color:black">More information: </span></b><span style="font-family:Arial,sans-serif"><br>
<span style="color:black">To know more about the IBM BigFix Compliance SCM
checklists, please see the following resources:<b><span></span></b></span></span></p>
<p class="gmail-MsoListParagraphCxSpFirst" style="margin:6pt 0in 6pt 0.75in;font-size:12pt;font-family:"Times New Roman",serif"><a name="OLE_LINK9"></a><a name="OLE_LINK4"></a><a name="OLE_LINK3"></a><a name="OLE_LINK2"></a><a name="OLE_LINK1"><span><span><span><span><span style="font-size:11pt;font-family:Symbol;color:black"><span>·<span style="font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span></span><span style="font-size:11pt;font-family:Arial,sans-serif;color:black">IBM Developer Works:<br>
</span></span></span></span></span></a><a href="https://www.ibm.com/developerworks/community/wikis/home?lang=en#!/wiki/Tivoli%20Endpoint%20Manager/page/SCM%20Checklists" style="color:blue;text-decoration:underline"><span><span><span><span><span><span style="font-size:11pt;font-family:Arial,sans-serif">https://www.ibm.com/developerworks/community/wikis/home?lang=en#!/wiki/Tivoli%20Endpoint%20Manager/page/SCM%20Checklists</span></span></span></span></span></span></a><span><span><span><span><span><span class="gmail-MsoHyperlink" style="color:blue;text-decoration:underline"><span style="font-size:11pt;font-family:Arial,sans-serif"><br>
<br>
</span></span></span></span></span></span></span><span><span><span><span><span><span style="font-size:11pt;font-family:Arial,sans-serif;color:black"><span></span></span></span></span></span></span></span></p>
<p class="gmail-MsoListParagraphCxSpMiddle" style="margin:6pt 0in 6pt 0.75in;font-size:12pt;font-family:"Times New Roman",serif"><span><span><span><span><span><span style="font-size:11pt;font-family:Symbol;color:black"><span>·<span style="font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span></span><span style="font-size:11pt;font-family:Arial,sans-serif;color:black">IBM BigFix Blog:<br>
</span></span></span></span></span></span><a href="https://www.ibm.com/developerworks/community/blogs/a1a33778-88b7-452a-9133-c955812f8910?lang=en" style="color:blue;text-decoration:underline"><span><span><span><span><span><span style="font-size:11pt;font-family:Arial,sans-serif">https://www.ibm.com/developerworks/community/blogs/a1a33778-88b7-452a-9133-c955812f8910?lang=en</span></span></span></span></span></span></a><span><span><span><span><span><span style="font-size:11pt;font-family:Arial,sans-serif;color:black"><span></span></span></span></span></span></span></span></p>
<span></span><span></span><span></span><span></span><span></span>
<p class="gmail-MsoListParagraphCxSpMiddle" style="margin:6pt 0in 6pt 1in;font-size:12pt;font-family:"Times New Roman",serif"><span style="font-size:11pt;font-family:Arial,sans-serif;color:black"><span> </span></span></p>
<p class="gmail-MsoListParagraphCxSpLast" style="margin:6pt 0in 6pt 0.75in;font-size:12pt;font-family:"Times New Roman",serif"><span style="font-size:11pt;font-family:Symbol;color:black"><span>·<span style="font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span></span><span style="font-size:11pt;font-family:Arial,sans-serif;color:black">IBM BigFix Forum:<br>
</span><a href="https://forum.bigfix.com/c/release-announcements/compliance" style="color:blue;text-decoration:underline"><span style="font-size:11pt;font-family:Arial,sans-serif">https://forum.bigfix.com/c/release-announcements/compliance</span></a><span style="font-size:11pt;font-family:Arial,sans-serif"><br>
<br>
<span style="color:black"><span></span></span></span></p>
<p class="MsoNormal" style="margin:0in 0in 0.0001pt;line-height:normal;font-size:11pt;font-family:Calibri,sans-serif"><span style="font-family:Arial,sans-serif">We hope you find this latest release of SCM content useful
and effective. Thank you!<br>
<br>
<i> -- The IBM BigFix Compliance team<span style="color:black"><span></span></span></i></span></p>
<br></div>