2 RHEL / Linux STIG

STIG Fundamentals · 3:26

Listen on 93

Lyrics

[Verse 1]
Lock down your system files tight
Check permissions day and night
Seven five five for user read and write
Four for group and others sight
SUID and SGID must be controlled
No surprise escalation unfold
Root access needs a careful hold
Security stories must be told

[Chorus]
RHEL STIG keeping systems strong
File ownership where it belongs
PAM and audit all along
SELinux enforcing nothing wrong
Harden kernels all day long
FIPS crypto singing security's song
Partition smart and mount with care
Linux locked down everywhere

[Verse 2]
PAM configuration leads the way
Password quality rules the day
Pwquality module here to stay
Weak passwords we don't obey
SSH hardening protocol
No root login through the wall
Key based auth standing tall
Security practices for us all

[Chorus]
RHEL STIG keeping systems strong
File ownership where it belongs
PAM and audit all along
SELinux enforcing nothing wrong
Harden kernels all day long
FIPS crypto singing security's song
Partition smart and mount with care
Linux locked down everywhere

[Bridge]
Auditd watching every move
Privileged commands in the groove
File access logs improve
Account changes we must prove
ASLR randomizing space
Sysctl parameters in their place
Network memory protection base
Security woven with such grace

[Verse 3]
SELinux enforcing mode required
Context labels never tired
Policy management inspired
Security boundaries never expired
Package management GPG signed
Unnecessary software left behind
FIPS validation peace of mind
Cryptographic strength refined

[Chorus]
RHEL STIG keeping systems strong
File ownership where it belongs
PAM and audit all along
SELinux enforcing nothing wrong
Harden kernels all day long
FIPS crypto singing security's song
Partition smart and mount with care
Linux locked down everywhere

[Outro]
Tmp and var in separate space
Nosuid noexec keeping pace
Var log partition finds its place
DISA STIG security embrace
Red Hat systems locked and true
Compliance shining through and through

← 3 SCAP and Automated Assessment | 3 Network Device STIGs →