<div dir="ltr"><p class="MsoNormal" style="line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;margin:0in 0in 8pt;font-size:11pt;font-family:Calibri,sans-serif"><b><span lang="EN-GB" style="font-size:10.5pt;font-family:Helvetica">Product:</span></b><span lang="EN-GB" style="font-size:10.5pt;font-family:Helvetica"><br>
BigFix Compliance</span></p>

<p class="MsoNormal" style="line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;margin:0in 0in 8pt;font-size:11pt;font-family:Calibri,sans-serif"><b><span lang="EN-GB" style="font-size:10.5pt;font-family:Helvetica">Title:</span></b><span lang="EN-GB" style="font-size:10.5pt;font-family:Helvetica"><br>
Updated CIS Red Hat Enterprise Linux 8 with bug fixes.</span></p>

<p class="MsoNormal" style="line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;margin:0in 0in 8pt;font-size:11pt;font-family:Calibri,sans-serif"><b><span lang="EN-GB" style="font-size:10.5pt;font-family:Helvetica">Security Benchmark:</span></b><span lang="EN-GB" style="font-size:10.5pt;font-family:Helvetica"><br>
CIS Red Hat Enterprise Linux 8 Benchmark, v2.0.0</span></p>

<p class="MsoNormal" style="line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;margin:0in 0in 8pt;font-size:11pt;font-family:Calibri,sans-serif"><b><span lang="EN-GB" style="font-size:10.5pt;font-family:Helvetica">Published Sites:</span></b><span lang="EN-GB" style="font-size:10.5pt;font-family:Helvetica"><br>
CIS Checklist for RHEL 8, site version 29<br>
(The site version is provided for air-gap customers.)</span></p>

<p class="MsoNormal" style="line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;margin:0in 0in 8pt;font-size:11pt;font-family:Calibri,sans-serif"><b><span lang="EN-GB" style="font-size:10.5pt;font-family:Helvetica">Details:</span></b><span lang="EN-GB" style="font-size:10.5pt;font-family:Helvetica"></span></p>

<ul type="disc" style="margin-bottom:0in">
 <li class="MsoNormal" style="line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;margin:0in 0in 8pt;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN-GB" style="font-size:10.5pt;font-family:Helvetica">Fixed and Improved implementation for the following check:</span></li>
</ul>

<p class="MsoNormal" style="margin:0in 0in 8pt 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:107%;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN-GB" style="font-size:12pt;line-height:107%;color:rgb(47,47,47);border:1pt none windowtext;padding:0in">4.1.3.6 - Ensure use of privileged
commands are collected    <br>
6.1.2 - Ensure sticky bit is set on all world-writable directories    <br>
6.1.11 - Ensure no world writable files exist    <br>
6.1.12 - Ensure no unowned files or directories exist    <br>
6.1.13 - Ensure no ungrouped files or directories exist<br>
3.4.2.7 - Ensure nftables loopback traffic is configured<br>
3.4.3.3.5 - Ensure ip6tables rules are saved<br>
3.4.3.3.6 - Ensure ip6tables is enabled and active<br>
3.4.3.3.4 - Ensure ip6tables default deny firewall policy<br>
3.4.3.3.1 - Ensure ip6tables loopback traffic is configured<br>
3.3.1 - Ensure source routed packets are not accepted<br>
3.3.2 - Ensure ICMP redirects are not accepted<br>
3.3.9 - Ensure IPv6 router advertisements are not accepted<br>
3.2.1 - Ensure IP forwarding is disabled<br>
4.1.3.19 - Ensure kernel module loading unloading and modification is collected<br>
3.4.1.4 - Ensure firewalld service enabled and running<br>
4.1.1.2 - Ensure auditd service is enabled<br>
4.2.1.2 - Ensure rsyslog service is enabled<br>
3.1.1 - Verify if IPv6 is enabled on the system<br>
5.1.1 - Ensure cron daemon is enabled<br>
4.1.3.14 - Ensure events that modify the system's Mandatory Access Controls are
collected<br>
1.4.2 - Ensure permissions on bootloader config are configured<br>
3.1.4 - Ensure wireless interfaces are disabled</span></p>

<p style="margin:0in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:12pt;font-family:"Times New Roman",serif"><span lang="EN-GB" style="font-size:10.5pt;font-family:Helvetica"> </span></p>

<p style="margin:0in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:12pt;font-family:"Times New Roman",serif"><span lang="EN-GB" style="font-size:10.5pt;font-family:Helvetica"> </span></p>

<p style="margin:0in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:12pt;font-family:"Times New Roman",serif"><span lang="EN-GB" style="font-size:10.5pt;font-family:Helvetica"><br>
</span><b><span lang="EN-GB" style="font-family:Calibri,sans-serif;color:black;border:1pt none windowtext;padding:0in">Actions to take:</span></b><span lang="EN-GB" style="font-family:Calibri,sans-serif;color:rgb(32,31,30)"></span></p>

<ul style="margin-top:0in;margin-bottom:0in" type="disc">
 <li class="MsoNormal" style="color:rgb(47,47,47);background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;margin:0in 0in 8pt;line-height:107%;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN-GB" style="font-size:12pt;line-height:107%;border:1pt none windowtext;padding:0in">To subscribe to the above site, you can use the License
     Overview Dashboard to enable and gather the site. Note that you must be
     entitled to the BigFix Compliance product, and you must be using BigFix
     version 9.2 and later.</span><span lang="EN-GB" style="font-size:12pt;line-height:107%"></span></li>
 <li class="MsoNormal" style="color:rgb(47,47,47);background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;margin:0in 0in 8pt;line-height:107%;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN-GB" style="font-size:12pt;line-height:107%;border:1pt none windowtext;padding:0in">If you use custom sites, update your custom sites accordingly
     to use the latest content. You can synchronize your content by using the
     Synchronize Custom Checks wizard. For more information, see </span><span lang="EN-GB" style="font-size:12pt;line-height:107%"></span></li>
</ul>

<p class="MsoNormal" style="margin:0in 0in 8pt 0.25in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:107%;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN-GB" style="color:black"><a href="https://help.hcltechsw.com/bigfix/10.0/compliance/Compliance/SCM_Users_Guide/c_using_synchronize_custom_checks_wiz.html" style="color:blue"><span lang="EN-US" style="font-size:12pt;line-height:107%;border:1pt none windowtext;padding:0in">https://help.hcltechsw.com/bigfix/10.0/compliance/Compliance/SCM_Users_Guide/c_using_synchronize_custom_checks_wiz.html</span></a></span><span lang="EN-GB" style="font-size:12pt;line-height:107%;color:rgb(47,47,47)"></span></p>

<p style="margin:0in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:12pt;font-family:"Times New Roman",serif"><b><span lang="EN-GB" style="font-family:Calibri,sans-serif;color:black;border:1pt none windowtext;padding:0in">More information:</span></b><span lang="EN-GB" style="font-family:Calibri,sans-serif;color:rgb(32,31,30);border:1pt none windowtext;padding:0in"><br>
</span><span lang="EN-GB" style="font-family:Calibri,sans-serif;color:black;border:1pt none windowtext;padding:0in">To know more about the BigFix Compliance SCM checklists, please
see the following resources:</span><span lang="EN-GB" style="font-family:Calibri,sans-serif;color:rgb(32,31,30)"></span></p>

<ul style="margin-top:0in;margin-bottom:0in" type="disc">
 <li class="MsoNormal" style="color:black;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;margin:0in 0in 8pt;line-height:107%;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN-GB" style="font-size:12pt;line-height:107%;border:1pt none windowtext;padding:0in">BigFix Forum:<br>
     </span><a name="_Hlk136428719"></a><a href="https://apc01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fforum.bigfix.com%2Fc%2Frelease-announcements%2Fcompliance&data=05%7C01%7Csaidinesh.ck%40hcl.com%7C5eaa0fe7f9a8429037af08da5434d4cc%7C189de737c93a4f5a8b686f4ca9941912%7C0%7C0%7C637914883135877412%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=Ro6Wm7SQxl97xa6jZT42%2BYyMzvS5wnMjxtsHdy0UR%2BQ%3D&reserved=0" target="_blank" title="Original URL: https://forum.bigfix.com/c/release-announcements/compliance. Click or tap if you trust this link." style="color:blue"><span style="font-size:12pt;line-height:107%;border:1pt none windowtext;padding:0in">https://forum.bigfix.com/c/release-announcements/compliance</span></a><span lang="EN-GB" style="font-size:12pt;line-height:107%"></span></li>
 <li class="MsoNormal" style="color:black;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;margin:0in 0in 8pt;line-height:107%;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN-GB" style="font-size:12pt;line-height:107%;color:rgb(34,34,34);border:1pt none windowtext;padding:0in">BigFix Compliance SCM Checklists:<br>
     </span><span lang="EN-GB"><a href="https://apc01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fbigfix-wiki.hcltechsw.com%2Fwikis%2Fhome%3Flang%3Denus%23!%2Fwiki%2FBigFix%2520Wiki%2Fpage%2FSCM%2520Checklists&data=05%7C01%7Csaidinesh.ck%40hcl.com%7C5eaa0fe7f9a8429037af08da5434d4cc%7C189de737c93a4f5a8b686f4ca9941912%7C0%7C0%7C637914883135877412%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=tFmeo1o19iK74IdmVwZBvh66CWQE1XeDCtcluA3cyZ0%3D&reserved=0" target="_blank" title="Original URL: https://bigfix-wiki.hcltechsw.com/wikis/home?lang=enus#!/wiki/BigFix%20Wiki/page/SCM%20Checklists. Click or tap if you trust this link." style="color:blue"><span lang="EN-US" style="font-size:12pt;line-height:107%;border:1pt none windowtext;padding:0in">https://bigfix-wiki.hcltechsw.com/wikis/home?lang=enus#!/wiki/BigFix%20Wiki/page/SCM%20Checklists</span></a></span><span lang="EN-GB" style="font-size:12pt;line-height:107%"></span></li>
</ul>

<p style="margin:0in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:12pt;font-family:"Times New Roman",serif"><span lang="EN-GB" style="font-family:Calibri,sans-serif;color:black;border:1pt none windowtext;padding:0in"> </span><span lang="EN-GB" style="font-family:Calibri,sans-serif;color:rgb(32,31,30)"></span></p>

<p style="margin:0in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:12pt;font-family:"Times New Roman",serif"><span lang="EN-GB" style="font-family:Calibri,sans-serif;color:rgb(32,31,30);border:1pt none windowtext;padding:0in">We hope you find this latest
release of SCM content useful and effective. Thank you!<br>
 <br>
<i> -- The BigFix Compliance team</i></span><span lang="EN-GB" style="font-family:Calibri,sans-serif;color:rgb(32,31,30)"></span></p>

<p class="MsoNormal" style="margin:0in 0in 8pt 0.5in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN-GB"> </span></p></div>