STIGQter: STIG Summary: Oracle Linux 8 Security Technical Implementation Guide Version: 2 Release: 9 Benchmark Date: 01 Jul 2026:

OL 8 must use a Linux Security Module configured to enforce limits on system services.

DISA Rule

SV-248548r958518_rule

Vulnerability Number

V-248548

Group Title

SRG-OS-000134-GPOS-00068

Rule Version

OL08-00-010170

Severity

CAT II

CCI(s)

• CCI-001084 - Isolate security functions from nonsecurity functions.

Weight

10

Fix Recommendation

Configure OL 8 to verify correct operation of all security functions.

Set "SELinux" to "Enforcing" mode by modifying the "/etc/selinux/config" file with the following line:

SELINUX=enforcing

A reboot is required for the changes to take effect.

Check Contents

Verify the operating system verifies correct operation of all security functions.

Check if "SELinux" is in "Enforcing" mode with the following command:

$ getenforce
Enforcing

If "SELinux" is not in "Enforcing" mode, this is a finding.

Vulnerability Number

V-248548

Documentable

False

Rule Version

OL08-00-010170

Severity Override Guidance

Verify the operating system verifies correct operation of all security functions.

Check if "SELinux" is in "Enforcing" mode with the following command:

$ getenforce
Enforcing

If "SELinux" is not in "Enforcing" mode, this is a finding.

Check Content Reference

M

Target Key

5416