STIGQter STIGQter: STIG Summary: Tri-Lab Operating System Stack (TOSS) 4 Security Technical Implementation Guide Version: 2 Release: 6 Benchmark Date: 01 Jul 2026:

TOSS must use a Linux Security Module configured to enforce limits on system services.

DISA Rule

SV-252920r958518_rule

Vulnerability Number

V-252920

Group Title

SRG-OS-000134-GPOS-00068

Rule Version

TOSS-04-010090

Severity

CAT II

CCI(s)

Weight

10

Fix Recommendation

Configure the operating system to verify correct operation of all security functions.

Set the "SELinux" status and the "Enforcing" mode by modifying the "/etc/selinux/config" file to have the following line:

SELINUX=enforcing

A reboot is required for the changes to take effect.

Check Contents

Verify that TOSS verifies the correct operation of all security functions.

Check if "SELinux" is active and in "Enforcing" mode with the following command:

$ sudo getenforce
Enforcing

If "SELinux" is not active or not in "Enforcing" mode, this is a finding.

Vulnerability Number

V-252920

Documentable

False

Rule Version

TOSS-04-010090

Severity Override Guidance

Verify that TOSS verifies the correct operation of all security functions.

Check if "SELinux" is active and in "Enforcing" mode with the following command:

$ sudo getenforce
Enforcing

If "SELinux" is not active or not in "Enforcing" mode, this is a finding.

Check Content Reference

M

Target Key

5469