STIGQter: STIG Summary: Red Hat Ansible Automation Controller Web Server Security Technical Implementation Guide Version: 2 Release: 3 Benchmark Date: 05 Jan 2026:

All Automation Controller NGINX web servers must protect system resources and privileged operations from hosted applications.

DISA Rule

SV-256951r960963_rule

Vulnerability Number

V-256951

Group Title

SRG-APP-000141-WSR-000086

Rule Version

APWS-AT-000350

Severity

CAT III

CCI(s)

• CCI-000381 - Configure the system to provide only organization-defined mission essential capabilities.

Weight

10

Fix Recommendation

As a system administrator for each Automation Controller NGINX web server host, place the server in SELinux enforcing mode:

setenforce 1

Check Contents

As a system administrator for each Automation Controller NGINX web server host, check if SELinux is enabled in enforcing mode:

getenforce | grep Enforcing >/dev/null || echo FAILED

If "FAILED" is displayed, this is a finding.

Vulnerability Number

V-256951

Documentable

False

Rule Version

APWS-AT-000350

Severity Override Guidance

As a system administrator for each Automation Controller NGINX web server host, check if SELinux is enabled in enforcing mode:

getenforce | grep Enforcing >/dev/null || echo FAILED

If "FAILED" is displayed, this is a finding.

Check Content Reference

M

Target Key

5535