[Verse 1] Lock down your system files tight Check permissions day and night Seven five five for user read and write Four for group and others sight SUID and SGID must be controlled No surprise escalation unfold Root access needs a careful hold Security stories must be told [Chorus] RHEL STIG keeping systems strong File ownership where it belongs PAM and audit all along SELinux enforcing nothing wrong Harden kernels all day long FIPS crypto singing security's song Partition smart and mount with care Linux locked down everywhere [Verse 2] PAM configuration leads the way Password quality rules the day Pwquality module here to stay Weak passwords we don't obey SSH hardening protocol No root login through the wall Key based auth standing tall Security practices for us all [Chorus] RHEL STIG keeping systems strong File ownership where it belongs PAM and audit all along SELinux enforcing nothing wrong Harden kernels all day long FIPS crypto singing security's song Partition smart and mount with care Linux locked down everywhere [Bridge] Auditd watching every move Privileged commands in the groove File access logs improve Account changes we must prove ASLR randomizing space Sysctl parameters in their place Network memory protection base Security woven with such grace [Verse 3] SELinux enforcing mode required Context labels never tired Policy management inspired Security boundaries never expired Package management GPG signed Unnecessary software left behind FIPS validation peace of mind Cryptographic strength refined [Chorus] RHEL STIG keeping systems strong File ownership where it belongs PAM and audit all along SELinux enforcing nothing wrong Harden kernels all day long FIPS crypto singing security's song Partition smart and mount with care Linux locked down everywhere [Outro] Tmp and var in separate space Nosuid noexec keeping pace Var log partition finds its place DISA STIG security embrace Red Hat systems locked and true Compliance shining through and through
← 3 SCAP and Automated Assessment | 3 Network Device STIGs →