SRG-OS-000104-GPOS-00051 Controls

STIG IDVersionTitleProduct
ALMA-09-032910V1R4Groups must have unique Group IDs (GIDs).AlmaLinux OS 9
ALMA-09-033020V1R4Duplicate User IDs (UIDs) must not exist for interactive users.AlmaLinux OS 9
ALMA-09-033130V1R4All AlmaLinux OS 9 interactive users must have a primary group that exists.AlmaLinux OS 9
APPL-14-000090V2R4The macOS system must disable logon to other user's active and locked sessions.macOS 14 - Sonoma
APPL-14-000100V2R4The macOS system must disable root logon.macOS 14 - Sonoma
APPL-14-005052V2R4The macOS system must configure login window to prompt for username and password.macOS 14 - Sonoma
APPL-15-000090V1R5The macOS system must disable login to other users' active and locked sessions.macOS 15 - Sequoia
APPL-15-000100V1R5The macOS system must disable root login.macOS 15 - Sequoia
APPL-15-002066V1R5The macOS system must disable unattended or automatic login to the system.macOS 15 - Sequoia
APPL-15-005052V1R5The macOS system must configure the login window to prompt for username and password.macOS 15 - Sequoia
OL07-00-010500V3R3The Oracle Linux operating system must uniquely identify and must authenticate organizational users (or processes acting on behalf of organizational users) using multifactor authentication.Oracle Linux 7
OL07-00-020300V3R3The Oracle Linux operating system must be configured so that all Group Identifiers (GIDs) referenced in the /etc/passwd file are defined in the /etc/group file.Oracle Linux 7
OL09-00-000940V1R3OL 9 must use the CAC smart card driver.Oracle Linux 9
OL09-00-003001V1R3OL 9 duplicate User IDs (UIDs) must not exist for interactive users.Oracle Linux 9
OL09-00-003005V1R3OL 9 interactive users must have a primary group that exists.Oracle Linux 9
OL09-00-003006V1R3OL 9 groups must have unique Group ID (GID).Oracle Linux 9
RHEL-07-010500V3R9The Red Hat Enterprise Linux operating system must uniquely identify and must authenticate organizational users (or processes acting on behalf of organizational users) using multifactor authentication.Red Hat Enterprise Linux 7
RHEL-07-020300V3R9The Red Hat Enterprise Linux operating system must be configured so that all Group Identifiers (GIDs) referenced in the /etc/passwd file are defined in the /etc/group file.Red Hat Enterprise Linux 7
RHEL-08-020240V2R5RHEL 8 duplicate User IDs (UIDs) must not exist for interactive users.Red Hat Enterprise Linux 8
RHEL-09-411030V2R6RHEL 9 duplicate User IDs (UIDs) must not exist for interactive users.Red Hat Enterprise Linux 9
RHEL-09-411045V2R6All RHEL 9 interactive users must have a primary group that exists.Red Hat Enterprise Linux 9
RHEL-09-411110V2R6RHEL 9 groups must have unique Group ID (GID).Red Hat Enterprise Linux 9
RHEL-09-611160V2R6RHEL 9 must use the common access card (CAC) smart card driver.Red Hat Enterprise Linux 9
SLES-12-010640V3R2The SUSE operating system must not have duplicate User IDs (UIDs) for interactive users.SUSE Linux Enterprise 12
SLES-15-010230V2R4The SUSE operating system must not have duplicate User IDs (UIDs) for interactive users.SUSE Linux Enterprise 15
TOSS-04-020060V2R3TOSS duplicate User IDs (UIDs) must not exist for interactive users.Tri-Lab Operating System Stack
UBTU-18-010444V2R15The Ubuntu operating system must uniquely identify interactive users.Ubuntu 18.04
UBTU-20-010010V2R3The Ubuntu operating system must uniquely identify interactive users.Ubuntu 20.04
UBTU-22-411015V2R6Ubuntu 22.04 LTS must uniquely identify interactive users.Ubuntu 22.04
UBTU-24-400000V1R1Ubuntu 24.04 LTS must uniquely identify interactive users.Ubuntu 24.04
WN10-SO-000005V3R4The built-in administrator account must be disabled.Microsoft Windows 10
WN11-SO-000005V2R5The built-in administrator account must be disabled.Microsoft Windows 11
WN16-00-000080V2R9Shared user accounts must not be permitted on the system.Microsoft Windows Server 2016
WN16-00-000210V2R9Outdated or unused accounts must be removed from the system or disabled.Microsoft Windows Server 2016
WN16-00-000220V2R9Windows Server 2016 accounts must require passwords.Microsoft Windows Server 2016
WN19-00-000070V3R6Windows Server 2019 shared user accounts must not be permitted.Microsoft Windows Server 2019
WN19-00-000200V3R6Windows Server 2019 accounts must require passwords.Microsoft Windows Server 2019
WN22-00-000070V2R6Windows Server 2022 shared user accounts must not be permitted.Microsoft Windows Server 2022
WN22-00-000200V2R6Windows Server 2022 accounts must require passwords.Microsoft Windows Server 2022