STIGQter: STIG Summary: General Purpose Operating System Security Requirements Guide Version: 3 Release: 3 Benchmark Date: 28 Oct 2025:

The operating system must enforce a role-based access control (RBAC) policy over defined subjects and objects.

DISA Rule

SV-278974r1137698_rule

Vulnerability Number

V-278974

Group Title

SRG-OS-000313

Rule Version

SRG-OS-000313-GPOS-00124

Severity

CAT II

CCI(s)

• CCI-002169 - Enforce a role-based access control policy over defined subjects and objects based upon organization-defined roles and users authorized to assume such roles.
• CCI-000366 - Implement the security configuration settings.

Weight

10

Fix Recommendation

Configure the operating system to enforce an RBAC policy over defined subjects and objects.

Check Contents

Verify the operating system is configured to enforce an RBAC policy over defined subjects and objects.

If the operating system is not configured to enforce an RBAC policy over defined subjects and objects, this is a finding.

Vulnerability Number

V-278974

Documentable

False

Rule Version

SRG-OS-000313-GPOS-00124

Severity Override Guidance

Verify the operating system is configured to enforce an RBAC policy over defined subjects and objects.

If the operating system is not configured to enforce an RBAC policy over defined subjects and objects, this is a finding.

Check Content Reference

M

Target Key

2895