Skip to content

Feature: disaSTIGlow ​

Description ​

A feature that applies Defense Information Systems Agency (DISA) Security Technical Implementation Guide (STIG) low-severity controls.

What it does ​

Configures auditd settings, account lockout (faillock), resource limits, password quality requirements, and sysctl settings per DISA STIG low-impact requirements.

Files ​

Files present in this feature and their purpose. See the feature file reference for the semantics of each file type.

FilePurpose
exec.config (ref)Applies DISA STIG low-severity configuration.
file.include.markers.yaml (ref)Maps files to test-coverage marker IDs.
info.yaml (ref)Declares type: element and included/excluded features.
file.include/etc/audit/auditd.conf (file.include)Configures auditd per DISA STIG requirements.
file.include/etc/security/faillock.conf (file.include)Configures account lockout per DISA STIG requirements.
file.include/etc/security/limits.conf (file.include)Sets resource limits per DISA STIG requirements.
file.include/etc/security/pwquality.conf (file.include)Sets password quality requirements per DISA STIG.
file.include/etc/sysctl.d/99-disaSTIG.conf (file.include)Applies sysctl settings per DISA STIG requirements.

This feature has no include or exclude relationships.