<div dir="ltr">
<p class="MsoNormal" style="margin:0in 0in 0.0001pt;font-size:12pt;font-family:"Times New Roman",serif"><b><span style="font-family:Arial,sans-serif;color:black">Product: </span></b><span style="font-family:Arial,sans-serif;color:black"><br>
IBM BigFix Compliance <br>
<b><br>
Title: </b><br>
Updated a few checks with fixes on </span><span style="font-family:Arial,sans-serif">DISA
STIG Checklist for RHEL 7 <span style="color:black"><span> </span></span><span></span></span></p>
<p class="MsoNormal" style="margin:0in 0in 0.0001pt;font-size:12pt;font-family:"Times New Roman",serif"><b><span style="font-family:Arial,sans-serif;color:black"><br>
Security Benchmark: </span></b><span style="font-family:Arial,sans-serif;color:black"><br>
Red Hat Enterprise Linux 7 Manual STIG Benchmark, Version 1, Release 1 </span><span></span></p>
<p class="MsoNormal" style="margin:0in 0in 0.0001pt;font-size:12pt;font-family:"Times New Roman",serif"><b><span style="font-family:Arial,sans-serif;color:black"><br>
Published Sites: </span></b><span style="font-family:Arial,sans-serif;color:black"><br>
</span><span style="font-family:Arial,sans-serif">Updated DISA STIG Checklist
for RHEL 7, site version 6<span> </span><span style="color:black"><br>
<i>(The site version is provided for air-gap customers.)</i><br>
<br>
<b><br>
Details:</b></span></span><b><span style="font-size:11pt;font-family:Arial,sans-serif;color:black"><span></span></span></b></p>
<p class="gmail-MsoListParagraphCxSpFirst" style="font-size:12pt;font-family:"Times New Roman",serif"><span style="font-family:Symbol"><span>·<span style="font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span></span><span style="font-family:Helvetica">RHEL-07-030010:
Also check for "failure 2".<span></span></span></p>
<p class="gmail-MsoListParagraphCxSpMiddle" style="font-size:12pt;font-family:"Times New Roman",serif"><span style="font-family:Symbol"><span>·<span style="font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span></span><span style="font-family:Helvetica">RHEL-07-040410:
Fixed check for proper permissions.<span></span></span></p>
<p class="gmail-MsoListParagraphCxSpMiddle" style="font-size:12pt;font-family:"Times New Roman",serif"><span style="font-family:Symbol"><span>·<span style="font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span></span><span style="font-family:Helvetica">RHEL-07-020050:
Fixed search for gpgcheck, now anchors to beginning of line to avoid
localpkg_gpgcheck and repo_gpgcheck.<span></span></span></p>
<p class="gmail-MsoListParagraphCxSpMiddle" style="font-size:12pt;font-family:"Times New Roman",serif"><span style="font-family:Symbol"><span>·<span style="font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span></span><span style="font-family:Helvetica">RHEL-07-040710:
Fixed typo in params file causing false noncompliance.<span></span></span></p>
<p class="gmail-MsoListParagraphCxSpMiddle" style="font-size:12pt;font-family:"Times New Roman",serif"><span style="font-family:Symbol"><span>·<span style="font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span></span><span style="font-family:Helvetica">RHEL-07-021030:
Now checks group owner of world writeable directories.<span></span></span></p>
<p class="gmail-MsoListParagraphCxSpMiddle" style="font-size:12pt;font-family:"Times New Roman",serif"><span style="font-family:Symbol"><span>·<span style="font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span></span><span style="font-family:Helvetica">RHEL-07-021000:
Now looks for nosuid instead of nosetuid.<span></span></span></p>
<p class="gmail-MsoListParagraphCxSpMiddle" style="font-size:12pt;font-family:"Times New Roman",serif"><span style="font-family:Symbol"><span>·<span style="font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span></span><span style="font-family:Helvetica">RHEL-07-040400:
Fixed typo in params file and now does case insensitive search.<span></span></span></p>
<p class="gmail-MsoListParagraphCxSpMiddle" style="font-size:12pt;font-family:"Times New Roman",serif"><span style="font-family:Symbol"><span>·<span style="font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span></span><span style="font-family:Helvetica">RHEL-07-040420:
Fixed check for proper permissions.<span></span></span></p>
<p class="gmail-MsoListParagraphCxSpMiddle" style="font-size:12pt;font-family:"Times New Roman",serif"><span style="font-family:Symbol"><span>·<span style="font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span></span><span style="font-family:Helvetica">RHEL-07-030330:
Excludes admin_space_left.<span></span></span></p>
<p class="gmail-MsoListParagraphCxSpMiddle" style="font-size:12pt;font-family:"Times New Roman",serif"><span style="font-family:Symbol"><span>·<span style="font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span></span><span style="font-family:Helvetica">RHEL-07-030340:
Excludes admin_space_left_action.<span></span></span></p>
<p class="gmail-MsoListParagraphCxSpLast" style="font-size:12pt;font-family:"Times New Roman",serif"><span style="font-family:Symbol"><span>·<span style="font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span></span><span style="font-family:Helvetica">RHEL-07-020720:
Excludes other variables containing the word PATH.<span></span></span></p>
<p class="MsoNormal" style="margin:0in 0in 0.0001pt;font-size:12pt;font-family:"Times New Roman",serif"><span style="font-family:Arial,sans-serif;color:rgb(47,47,47)"><span> </span></span></p>
<p class="MsoNormal" style="margin:0in 0in 0.0001pt;font-size:12pt;font-family:"Times New Roman",serif"><b><span style="font-family:Arial,sans-serif;color:black">Actions to take:<span></span></span></b></p>
<p class="gmail-MsoListParagraphCxSpFirst" style="margin:6pt 0in 6pt 0.75in;font-size:12pt;font-family:"Times New Roman",serif"><span style="font-size:11pt;font-family:Symbol;color:rgb(47,47,47)"><span>·<span style="font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span></span><span style="font-size:11pt;font-family:Arial,sans-serif;color:rgb(47,47,47)">To subscribe to the above site, you can use the License Overview
Dashboard to enable and gather the site. Note that you must be entitled to the
BigFix Compliance product and you must be using IBM BigFix version 9.2 and
later. <span></span></span></p>
<p class="gmail-MsoListParagraphCxSpMiddle" style="margin:6pt 0in 6pt 0.75in;font-size:12pt;font-family:"Times New Roman",serif"><span style="font-size:11pt;font-family:Arial,sans-serif;color:rgb(47,47,47)"><span> </span></span></p>
<p class="gmail-MsoListParagraphCxSpLast" style="margin:6pt 0in 6pt 0.75in;font-size:12pt;font-family:"Times New Roman",serif"><span style="font-size:11pt;font-family:Symbol;color:rgb(47,47,47)"><span>·<span style="font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span></span><span style="font-size:11pt;font-family:Arial,sans-serif;color:rgb(47,47,47)">If you use custom sites, update your custom sites accordingly to
use the latest content. You can synchronize your content by using the
Synchronize Custom Checks wizard. For more information, see </span><a href="https://ibm.biz/Bd4LBt" style="color:blue;text-decoration:underline"><span style="font-size:11pt;font-family:Arial,sans-serif">https://ibm.biz/Bd4LBt</span></a><span style="font-size:11pt;font-family:Arial,sans-serif;color:rgb(47,47,47)">.<span> </span><span></span></span></p>
<p class="MsoNormal" style="margin:0in 0in 0.0001pt;font-size:12pt;font-family:"Times New Roman",serif"><span style="font-family:Arial,sans-serif;color:black"><span> </span></span></p>
<p class="MsoNormal" style="margin:0in 0in 0.0001pt;font-size:12pt;font-family:"Times New Roman",serif"><span style="font-family:Arial,sans-serif;color:black"><span> </span><span></span></span></p>
<p class="MsoNormal" style="margin:0in 0in 0.0001pt;font-size:12pt;font-family:"Times New Roman",serif"><b><span style="font-family:Arial,sans-serif;color:black">More information: </span></b><span style="font-family:Arial,sans-serif"><br>
<span style="color:black">To know more about the IBM BigFix Compliance SCM
checklists, please see the following resources:<b><span></span></b></span></span></p>
<p class="gmail-MsoListParagraphCxSpFirst" style="margin:6pt 0in 6pt 0.75in;font-size:12pt;font-family:"Times New Roman",serif"><a name="OLE_LINK9"></a><a name="OLE_LINK4"></a><a name="OLE_LINK3"></a><a name="OLE_LINK2"></a><a name="OLE_LINK1"><span><span><span><span><span style="font-size:11pt;font-family:Symbol;color:black"><span>·<span style="font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span></span><span style="font-size:11pt;font-family:Arial,sans-serif;color:black">IBM Developer Works:<br>
</span></span></span></span></span></a><a href="https://www.ibm.com/developerworks/community/wikis/home?lang=en#!/wiki/Tivoli%20Endpoint%20Manager/page/SCM%20Checklists" style="color:blue;text-decoration:underline"><span><span><span><span><span><span style="font-size:11pt;font-family:Arial,sans-serif">https://www.ibm.com/developerworks/community/wikis/home?lang=en#!/wiki/Tivoli%20Endpoint%20Manager/page/SCM%20Checklists</span></span></span></span></span></span></a><span><span><span><span><span><span class="gmail-MsoHyperlink" style="color:blue;text-decoration:underline"><span style="font-size:11pt;font-family:Arial,sans-serif"><br>
<br>
</span></span></span></span></span></span></span><span><span><span><span><span><span style="font-size:11pt;font-family:Arial,sans-serif;color:black"><span></span></span></span></span></span></span></span></p>
<p class="gmail-MsoListParagraphCxSpMiddle" style="margin:6pt 0in 6pt 0.75in;font-size:12pt;font-family:"Times New Roman",serif"><span><span><span><span><span><span style="font-size:11pt;font-family:Symbol;color:black"><span>·<span style="font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span></span><span style="font-size:11pt;font-family:Arial,sans-serif;color:black">IBM BigFix Blog:<br>
</span></span></span></span></span></span><a href="https://www.ibm.com/developerworks/community/blogs/a1a33778-88b7-452a-9133-c955812f8910?lang=en" style="color:blue;text-decoration:underline"><span><span><span><span><span><span style="font-size:11pt;font-family:Arial,sans-serif">https://www.ibm.com/developerworks/community/blogs/a1a33778-88b7-452a-9133-c955812f8910?lang=en</span></span></span></span></span></span></a><span><span><span><span><span><span style="font-size:11pt;font-family:Arial,sans-serif;color:black"><span></span></span></span></span></span></span></span></p>
<span></span><span></span><span></span><span></span><span></span>
<p class="gmail-MsoListParagraphCxSpMiddle" style="margin:6pt 0in 6pt 1in;font-size:12pt;font-family:"Times New Roman",serif"><span style="font-size:11pt;font-family:Arial,sans-serif;color:black"><span> </span></span></p>
<p class="gmail-MsoListParagraphCxSpLast" style="margin:6pt 0in 6pt 0.75in;font-size:12pt;font-family:"Times New Roman",serif"><span style="font-size:11pt;font-family:Symbol;color:black"><span>·<span style="font-style:normal;font-variant:normal;font-weight:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span></span><span style="font-size:11pt;font-family:Arial,sans-serif;color:black">IBM BigFix Forum:<br>
</span><a href="https://forum.bigfix.com/c/release-announcements/compliance" style="color:blue;text-decoration:underline"><span style="font-size:11pt;font-family:Arial,sans-serif">https://forum.bigfix.com/c/release-announcements/compliance</span></a><span style="font-size:11pt;font-family:Arial,sans-serif"><br>
<br>
<span style="color:black"><span></span></span></span></p>
<p class="MsoNormal" style="margin:0in 0in 0.0001pt;font-size:12pt;font-family:"Times New Roman",serif"><span style="font-family:Arial,sans-serif">We hope you find this latest release of
SCM content useful and effective. Thank you!<br>
<br>
<i> -- The IBM BigFix Compliance team<span style="color:black"><span></span></span></i></span></p>
<br></div>