Add ‘rhel6stig_system_is_router’ variable to indicate whether or not target system is acting as a router. When set to ‘true’ this will disable certain changes that would break Linux router.
Limit the ability of processes to have simultaneous write and execute access to memory.
Use ASLR
DoD logon banner for SSH
Add additional finding ID to task that copies systme-auth-ac template
Add additional finding ID to task that sets /etc/passwd owner, group, and permissions
Remove .netrc files
Add ‘cat2’ tag to tasks
Use DoD logon banner for vsftpd
Add handler to restart vsftpd