diff --git a/defaults/main.yml b/defaults/main.yml index 28531ab..27181d9 100644 --- a/defaults/main.yml +++ b/defaults/main.yml @@ -2,7 +2,7 @@ # defaults file for rhel8_stig var_aide_scan_notification_email: root@localhost var_system_crypto_policy: FIPS -sshd_approved_ciphers: aes256-ctr,aes192-ctr,aes128-ctr +sshd_approved_ciphers: aes256-ctr,aes192-ctr,aes128-ctr,aes256-gcm@openssh.com,aes128-gcm@openssh.com sshd_approved_macs: hmac-sha2-512,hmac-sha2-256,hmac-sha2-512-etm@openssh.com,hmac-sha2-256-etm@openssh.com inactivity_timeout_value: '900' var_screensaver_lock_delay: '5' @@ -41,6 +41,7 @@ var_auditd_disk_full_action: syslog|single|halt var_auditd_action_mail_acct: root var_auditd_space_left_action: email var_auditd_space_left_percentage: '25' +var_auditd_name_format: hostname|fqd|numeric rsyslog_remote_loghost_address: logcollector sysctl_net_ipv6_conf_all_accept_ra_value: '0' sysctl_net_ipv6_conf_all_accept_redirects_value: '0' @@ -139,6 +140,7 @@ DISA_STIG_RHEL_08_010440: true DISA_STIG_RHEL_08_010450: true DISA_STIG_RHEL_08_010460: true DISA_STIG_RHEL_08_010470: true +DISA_STIG_RHEL_08_010471: true DISA_STIG_RHEL_08_010472: true DISA_STIG_RHEL_08_010480: true DISA_STIG_RHEL_08_010490: true @@ -179,8 +181,11 @@ DISA_STIG_RHEL_08_010830: true DISA_STIG_RHEL_08_020011: true DISA_STIG_RHEL_08_020012: true DISA_STIG_RHEL_08_020013: true +DISA_STIG_RHEL_08_020014: true DISA_STIG_RHEL_08_020015: true +DISA_STIG_RHEL_08_020016: true DISA_STIG_RHEL_08_020017: true +DISA_STIG_RHEL_08_020018: true DISA_STIG_RHEL_08_020019: true DISA_STIG_RHEL_08_020021: true DISA_STIG_RHEL_08_020023: true @@ -223,6 +228,7 @@ DISA_STIG_RHEL_08_020300: true DISA_STIG_RHEL_08_020310: true DISA_STIG_RHEL_08_020330: true DISA_STIG_RHEL_08_020331: true +DISA_STIG_RHEL_08_020332: true DISA_STIG_RHEL_08_020340: true DISA_STIG_RHEL_08_020350: true DISA_STIG_RHEL_08_020351: true @@ -237,6 +243,8 @@ DISA_STIG_RHEL_08_030061: true DISA_STIG_RHEL_08_030062: true DISA_STIG_RHEL_08_030063: true DISA_STIG_RHEL_08_030070: true +DISA_STIG_RHEL_08_030100: true +DISA_STIG_RHEL_08_030110: true DISA_STIG_RHEL_08_030121: true DISA_STIG_RHEL_08_030122: true DISA_STIG_RHEL_08_030130: true @@ -536,6 +544,8 @@ dir_ownership_library_dirs: true dir_permissions_library_dirs: true dir_perms_world_writable_root_owned: true dir_perms_world_writable_sticky_bits: true +directory_group_ownership_var_log_audit: true +directory_ownership_var_log_audit: true disable_ctrlaltdel_burstaction: true disable_ctrlaltdel_reboot: true disable_strategy: true