🛡️ CIS Benchmark Audit Report Red Hat Enterprise Linux 9 (STIG)

Version Suite: v1.4.0 | Date: 2026-08-11 19:36:21

Score Global: 45.0%
ID Control Title Category Status Execution Output
1.1.1.1 Ensure cramfs kernel module is not available Initial Setup FAIL insmod /lib/modules/6.18.33.2-microsoft-standard-WSL2/kernel/fs/cramfs/cramfs.ko
1.1.1.2 Ensure freevxfs kernel module is not available Initial Setup PASS
1.1.1.3 Ensure hfs kernel module is not available Initial Setup PASS
1.1.1.4 Ensure hfsplus kernel module is not available Initial Setup PASS
1.1.1.5 Ensure jffs2 kernel module is not available Initial Setup PASS
1.1.1.6 Ensure squashfs kernel module is not available Initial Setup PASS
1.1.1.7 Ensure udf kernel module is not available Initial Setup PASS
1.1.1.8 Ensure usb-storage kernel module is disabled Initial Setup PASS insmod /lib/modules/6.18.33.2-microsoft-standard-WSL2/kernel/drivers/usb/common/usb-common.ko insmo
1.3.1.1 Ensure SELinux is installed and active Initial Setup FAIL
1.3.1.2 Ensure SELinux state is enforcing Initial Setup FAIL
1.4.1 Ensure AIDE is installed Initial Setup FAIL
2.1.1 Ensure xinetd is not installed Services FAIL
2.2.1 Ensure telnet server is not installed Services FAIL
3.1.1 Ensure IP forwarding is disabled Network Configuration FAIL net.ipv4.ip_forward = 1
3.1.2 Ensure packet redirect sending is disabled Network Configuration FAIL net.ipv4.conf.all.send_redirects = 1
3.4.1 Ensure firewalld is installed and running Network Configuration PASS inactive
5.1.1 Ensure auditd service is enabled and running Logging and Auditing PASS inactive
5.2.1 Ensure SSH PermitRootLogin is disabled Access Control FAIL
5.2.2 Ensure SSH PermitEmptyPasswords is disabled Access Control FAIL
5.3.1 Ensure crypto policy is DEFAULT or FUTURE System Cryptography FAIL