Skip to content

Commit 717cef6

Browse files
redhatrisesredhatrises
authored
Merge pull request ComplianceAsCode#6309 from carlosmmatos/update-jre-overlay-file
Updating the stig_overlay.xml file for JRE
2 parents 8190c48 + f15221d commit 717cef6

File tree

1 file changed

+65
-41
lines changed

1 file changed

+65
-41
lines changed

Diff for: ‎jre/overlays/stig_overlay.xml

+65-41
Original file line numberDiff line numberDiff line change
@@ -1,43 +1,67 @@
1-
<?xml version="1.0"?>
1+
<?xml version="1.0" encoding="UTF-8"?>
22
<overlays xmlns="http://checklists.nist.gov/xccdf/1.1">
3-
<overlay owner="disastig" ruleid="java_jre_untrusted_sources" ownerid="JRE0001-UX" disa="612" severity="medium">
4-
<VMSinfo VKey="32828" SVKey="43596" VRelease="2" />
5-
<title>The dialog to enable users to grant permissions to execute signed content from an un-trusted authority must be disabled.</title>
6-
</overlay>
7-
<overlay owner="disastig" ruleid="java_jre_untrusted_sources_locked" ownerid="JRE0010-UX" disa="" severity="medium">
8-
<VMSinfo VKey="32829" SVKey="43601" VRelease="2" />
9-
<title>The dialog enabling users to grant permissions to execute signed content from an un-trusted authority must be locked.</title>
10-
</overlay>
11-
<overlay owner="disastig" ruleid="java_jre_validation_crl" ownerid="JRE0020-UX" disa="" severity="medium">
12-
<VMSinfo VKey="32830" SVKey="43604" VRelease="2" />
13-
<title>The setting for users to check publisher certificates for revocation must be enabled.</title>
14-
</overlay>
15-
<overlay owner="disastig" ruleid="java_jre_validation_crl_locked" ownerid="JRE0030-UX" disa="" severity="medium">
16-
<VMSinfo VKey="32831" SVKey="43617" VRelease="3" />
17-
<title>The setting enabling users to configure the check publisher certificates for revocation must be locked.</title>
18-
</overlay>
19-
<overlay owner="disastig" ruleid="java_jre_validation_ocsp" ownerid="JRE0040-UX" disa="" severity="medium">
20-
<VMSinfo VKey="32832" SVKey="43618" VRelease="2" />
21-
<title>The option to enable online certificate validation must be enabled.</title>
22-
</overlay>
23-
<overlay owner="disastig" ruleid="java_jre_validation_ocsp_locked" ownerid="JRE0050-UX" disa="" severity="medium">
24-
<VMSinfo VKey="32833" SVKey="43619" VRelease="2" />
25-
<title>The option to enable online certificate validation must be locked.</title>
26-
</overlay>
27-
<overlay owner="disastig" ruleid="java_jre_deployment_config_configured" ownerid="JRE0060-UX" disa="" severity="medium">
28-
<VMSinfo VKey="32842" SVKey="43649" VRelease="1" />
29-
<title>The configuration file must contain proper keys and values to deploy settings correctly.</title>
30-
</overlay>
31-
<overlay owner="disastig" ruleid="java_jre_deployment_config_exists" ownerid="JRE0070-UX" disa="" severity="medium">
32-
<VMSinfo VKey="32901" SVKey="43621" VRelease="1" />
33-
<title>A configuration file must be present to deploy properties for JRE.</title>
34-
</overlay>
35-
<overlay owner="disastig" ruleid="java_jre_deployment_properties_exists" ownerid="JRE0080-UX" disa="" severity="medium">
36-
<VMSinfo VKey="32902" SVKey="43620" VRelease="2" />
37-
<title>A properties file must be present to hold all the keys that establish properties within the Java control panel.</title>
38-
</overlay>
39-
<overlay owner="disastig" ruleid="java_jre_updated" ownerid="JRE0090-UX" disa="" severity="medium">
40-
<VMSinfo VKey="39239" SVKey="51133" VRelease="1" />
41-
<title>The version of the JRE running on the system must be the most current available.</title>
42-
</overlay>
3+
<overlay owner="disastig" ruleid="java_jre_deployment_config_exists" ownerid="JRE8-UX-000010" disa="366" severity="medium">
4+
<VMSinfo VKey="66721" SVKey="81211" VRelease="1"/>
5+
<title text="Oracle JRE 8 must have a deployment.config file present."/>
6+
</overlay>
7+
<overlay owner="disastig" ruleid="java_jre_deployment_config_mandatory" ownerid="JRE8-UX-000020" disa="366" severity="medium">
8+
<VMSinfo VKey="66909" SVKey="81399" VRelease="2"/>
9+
<title text="Oracle JRE 8 deployment.config file must contain proper keys and values."/>
10+
</overlay>
11+
<overlay owner="disastig" ruleid="java_jre_deployment_properties_exists" ownerid="JRE8-UX-000030" disa="366" severity="medium">
12+
<VMSinfo VKey="66911" SVKey="81401" VRelease="1"/>
13+
<title text="Oracle JRE 8 must have a deployment.properties file present."/>
14+
</overlay>
15+
<overlay owner="disastig" ruleid="java_jre_unsigned_applications_locked" ownerid="JRE8-UX-000060" disa="366" severity="low">
16+
<VMSinfo VKey="66913" SVKey="81403" VRelease="1"/>
17+
<title text="Oracle JRE 8 must default to the most secure built-in setting."/>
18+
</overlay>
19+
<overlay owner="disastig" ruleid="java_jre_enable_jws_locked" ownerid="JRE8-UX-000070" disa="366" severity="medium">
20+
<VMSinfo VKey="66915" SVKey="81405" VRelease="1"/>
21+
<title text="Oracle JRE 8 must be set to allow Java Web Start (JWS) applications."/>
22+
</overlay>
23+
<overlay owner="disastig" ruleid="java_jre_disable_untrusted_sources" ownerid="JRE8-UX-000080" disa="1695" severity="medium">
24+
<VMSinfo VKey="66917" SVKey="81407" VRelease="1"/>
25+
<title text="Oracle JRE 8 must disable the dialog enabling users to grant permissions to execute signed content from an untrusted authority."/>
26+
</overlay>
27+
<overlay owner="disastig" ruleid="java_jre_lock_untrusted_sources_locked" ownerid="JRE8-UX-000090" disa="1695" severity="medium">
28+
<VMSinfo VKey="66919" SVKey="81409" VRelease="1"/>
29+
<title text="Oracle JRE 8 must lock the dialog enabling users to grant permissions to execute signed content from an untrusted authority."/>
30+
</overlay>
31+
<overlay owner="disastig" ruleid="java_jre_validation_ocsp" ownerid="JRE8-UX-000100" disa="185" severity="medium">
32+
<VMSinfo VKey="66921" SVKey="81411" VRelease="1"/>
33+
<title text="Oracle JRE 8 must set the option to enable online certificate validation."/>
34+
</overlay>
35+
<overlay owner="disastig" ruleid="java_jre_blacklist_check" ownerid="JRE8-UX-000110" disa="1169" severity="medium">
36+
<VMSinfo VKey="66923" SVKey="81413" VRelease="1"/>
37+
<title text="Oracle JRE 8 must prevent the download of prohibited mobile code."/>
38+
</overlay>
39+
<overlay owner="disastig" ruleid="java_jre_accepted_sites_properties" ownerid="JRE8-UX-000120" disa="1774" severity="medium">
40+
<VMSinfo VKey="66925" SVKey="81415" VRelease="2"/>
41+
<title text="Oracle JRE 8 must enable the option to use an accepted sites list."/>
42+
</overlay>
43+
<overlay owner="disastig" ruleid="java_jre_accepted_sites_exists" ownerid="JRE8-UX-000130" disa="1774" severity="medium">
44+
<VMSinfo VKey="66927" SVKey="81417" VRelease="1"/>
45+
<title text="Oracle JRE 8 must have an exception.sites file present."/>
46+
</overlay>
47+
<overlay owner="disastig" ruleid="java_jre_validation_crl_locked" ownerid="JRE8-UX-000150" disa="1991" severity="medium">
48+
<VMSinfo VKey="66929" SVKey="81419" VRelease="1"/>
49+
<title text="Oracle JRE 8 must enable the dialog to enable users to check publisher certificates for revocation."/>
50+
</overlay>
51+
<overlay owner="disastig" ruleid="XXXX" ownerid="JRE8-UX-000160" disa="1991" severity="medium">
52+
<VMSinfo VKey="66931" SVKey="81421" VRelease="1"/>
53+
<title text="Oracle JRE 8 must lock the option to enable users to check publisher certificates for revocation."/>
54+
</overlay>
55+
<overlay owner="disastig" ruleid="java_jre_insecure_prompt" ownerid="JRE8-UX-000170" disa="2460" severity="medium">
56+
<VMSinfo VKey="66933" SVKey="81423" VRelease="1"/>
57+
<title text="Oracle JRE 8 must prompt the user for action prior to executing mobile code."/>
58+
</overlay>
59+
<overlay owner="disastig" ruleid="XXXX" ownerid="JRE8-UX-000180" disa="2605" severity="high">
60+
<VMSinfo VKey="66937" SVKey="81427" VRelease="1"/>
61+
<title text="The version of Oracle JRE 8 running on the system must be the most current available."/>
62+
</overlay>
63+
<overlay owner="disastig" ruleid="XXXX" ownerid="JRE8-UX-000190" disa="2617" severity="medium">
64+
<VMSinfo VKey="66935" SVKey="81425" VRelease="1"/>
65+
<title text="Oracle JRE 8 must remove previous versions when the latest version is installed."/>
66+
</overlay>
4367
</overlays>

0 commit comments

Comments
 (0)