<div dir="ltr"><p class="MsoNormal" style="line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;margin:0in 0in 8pt;font-size:11pt;font-family:Calibri,sans-serif"><b><span lang="EN-GB" style="font-size:10.5pt;font-family:Helvetica">Product:</span></b><span lang="EN-GB" style="font-size:10.5pt;font-family:Helvetica"><br>
BigFix Compliance</span></p>
<p class="MsoNormal" style="line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;margin:0in 0in 8pt;font-size:11pt;font-family:Calibri,sans-serif"><b><span lang="EN-GB" style="font-size:10.5pt;font-family:Helvetica">Title:</span></b><span lang="EN-GB" style="font-size:10.5pt;font-family:Helvetica"><br>
Updated CIS Red Hat Enterprise Linux 7 with bug fixes.</span></p>
<p class="MsoNormal" style="line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;margin:0in 0in 8pt;font-size:11pt;font-family:Calibri,sans-serif"><b><span lang="EN-GB" style="font-size:10.5pt;font-family:Helvetica">Security Benchmark:</span></b><span lang="EN-GB" style="font-size:10.5pt;font-family:Helvetica"><br>
CIS Red Hat Enterprise Linux 7 Benchmark, v3.1.1</span></p>
<p class="MsoNormal" style="line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;margin:0in 0in 8pt;font-size:11pt;font-family:Calibri,sans-serif"><b><span lang="EN-GB" style="font-size:10.5pt;font-family:Helvetica">Published Sites:</span></b><span lang="EN-GB" style="font-size:10.5pt;font-family:Helvetica"><br>
CIS Checklist for RHEL 7, site version 57<br>
(The site version is provided for air-gap customers.)</span></p>
<p class="MsoNormal" style="line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;margin:0in 0in 8pt;font-size:11pt;font-family:Calibri,sans-serif"><b><span lang="EN-GB" style="font-size:10.5pt;font-family:Helvetica">Details:</span></b><span lang="EN-GB" style="font-size:10.5pt;font-family:Helvetica"></span></p>
<ul type="disc" style="margin-bottom:0in">
<li class="MsoNormal" style="line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;margin:0in 0in 8pt;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN-GB" style="font-size:10.5pt;font-family:Helvetica">Fixed and Improved implementation for the following check:</span></li>
</ul>
<p class="MsoNormal" style="margin:0in 0in 8pt 0.5in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Calibri,sans-serif"><span class="gmail-ui-provider"><span lang="EN-GB" style="color:black">4.1.11 - Ensure use of privileged
commands is collected </span></span><span lang="EN-GB" style="color:black"><br>
<span class="gmail-ui-provider">1.1.22 - Ensure sticky bit is set on all world-writable
directories </span><br>
<span class="gmail-ui-provider">6.1.10 - Ensure no world writable files exist </span><br>
<span class="gmail-ui-provider">6.1.11 - Ensure no unowned files or directories exist </span><br>
<span class="gmail-ui-provider">6.1.12 - Ensure no ungrouped files or directories exist</span><br>
<span class="gmail-ui-provider">3.5.2.7 - Ensure nftables loopback traffic is
configured</span><br>
<span class="gmail-ui-provider">3.5.3.3.5 - Ensure ip6tables rules are saved</span><br>
<span class="gmail-ui-provider">3.5.3.3.6 - Ensure ip6tables is enabled and running</span><br>
<span class="gmail-ui-provider">3.5.3.3.4 - Ensure ip6tables default deny firewall
policy</span><br>
<span class="gmail-ui-provider">3.5.3.3.1 - Ensure ip6tables loopback traffic is
configured</span><br>
<span class="gmail-ui-provider">3.3.1 - Ensure source routed packets are not accepted</span><br>
<span class="gmail-ui-provider">3.3.2 - Ensure ICMP redirects are not accepted</span><br>
<span class="gmail-ui-provider">3.3.9 - Ensure IPv6 router advertisements are not
accepted</span><br>
<span class="gmail-ui-provider">3.2.1 - Ensure IP forwarding is disabled</span></span><span lang="EN-GB" style="font-size:10.5pt;font-family:Helvetica"></span></p>
<p style="background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;margin-right:0in;margin-left:0in;font-size:12pt;font-family:"Times New Roman",serif"><span lang="EN-GB" style="font-size:10.5pt;font-family:Helvetica"><br>
<strong>Actions
to take:</strong></span></p>
<ul type="disc" style="margin-bottom:0in">
<li class="MsoNormal" style="line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;margin:0in 0in 8pt;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN-GB" style="font-size:10.5pt;font-family:Helvetica">To subscribe to the above site,
you can use the License Overview Dashboard to enable and gather the site.
Note that you must be entitled to the BigFix Compliance product, and you
must be using BigFix version 9.5 and later.</span></li>
<li class="MsoNormal" style="line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;margin:0in 0in 8pt;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN-GB" style="font-size:10.5pt;font-family:Helvetica">If you use custom sites, update
your custom sites accordingly to use the latest content. You can
synchronize your content by using the Synchronize Custom Checks wizard.
For more information, see</span></li>
</ul>
<p style="background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;margin-right:0in;margin-left:0in;font-size:12pt;font-family:"Times New Roman",serif"><span lang="EN-GB" style="color:black"><a href="https://help.hcltechsw.com/bigfix/11.0/compliance/Compliance/SCM_Users_Guide/c_using_synchronize_custom_checks_wiz.html" target="_blank" style="color:blue"><span style="font-size:10.5pt;font-family:Helvetica;color:rgb(0,136,204)">https://help.hcltechsw.com/bigfix/11.0/compliance/Compliance/SCM_Users_Guide/c_using_synchronize_custom_checks_wiz.html</span></a></span><span lang="EN-GB" style="font-size:10.5pt;font-family:Helvetica"></span></p>
<p style="background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;margin-right:0in;margin-left:0in;font-size:12pt;font-family:"Times New Roman",serif"><strong><span lang="EN-GB" style="font-size:10.5pt;font-family:Helvetica">More
information:</span></strong><span lang="EN-GB" style="font-size:10.5pt;font-family:Helvetica"><br>
To know more about the BigFix Compliance SCM checklists, please see the
following resources:</span></p>
<ul type="disc" style="margin-bottom:0in">
<li class="MsoNormal" style="line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;margin:0in 0in 8pt;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN-GB" style="font-size:10.5pt;font-family:Helvetica">BigFix Forum:<br>
</span><span lang="EN-GB" style="color:black"><a href="https://forum.bigfix.com/c/release-announcements/compliance" style="color:blue"><span style="font-size:10.5pt;font-family:Helvetica;color:rgb(0,136,204)">https://forum.bigfix.com/c/release-announcements/compliance</span></a></span><span lang="EN-GB" style="font-size:10.5pt;font-family:Helvetica"></span></li>
<li class="MsoNormal" style="line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;margin:0in 0in 8pt;font-size:11pt;font-family:Calibri,sans-serif"><span lang="EN-GB" style="font-size:10.5pt;font-family:Helvetica">BigFix Compliance SCM
Checklists:<br>
</span><span lang="EN-GB" style="color:black"><a href="https://bigfix-wiki.hcltechsw.com/wikis/home?lang=enus#!/wiki/BigFix%20Wiki/page/SCM%20Checklists" style="color:blue"><span style="font-size:10.5pt;font-family:Helvetica;color:rgb(0,136,204)">https://bigfix-wiki.hcltechsw.com/wikis/home?lang=enus#!/wiki/BigFix%20Wiki/page/SCM%20Checklists</span></a></span><span lang="EN-GB" style="font-size:10.5pt;font-family:Helvetica"></span></li>
</ul>
<p style="background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;margin-right:0in;margin-left:0in;font-size:12pt;font-family:"Times New Roman",serif"><span lang="EN-GB" style="font-size:10.5pt;font-family:Helvetica">We hope you
find this latest release of SCM content useful and effective. Thank you!</span></p>
<p style="background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;margin-right:0in;margin-left:0in;font-size:12pt;font-family:"Times New Roman",serif"><em><span lang="EN-GB" style="font-size:10.5pt;font-family:Helvetica">– The
BigFix Compliance team</span></em><span lang="EN-GB" style="font-size:10.5pt;font-family:Helvetica"></span></p></div>