STIGQter: STIG Summary: SLES 12 Security Technical Implementation Guide Version: 2 Release: 3 Benchmark Date: 23 Apr 2021:

The SUSE operating system must be a vendor-supported release.

DISA Rule

SV-217101r603262_rule

Vulnerability Number

V-217101

Group Title

SRG-OS-000480-GPOS-00227

Rule Version

SLES-12-010000

Severity

CAT I

CCI(s)

• CCI-001230 - The organization incorporates flaw remediation into the organizational configuration management process.

Weight

10

Fix Recommendation

Upgrade the SUSE operating system to a version supported by the vendor. If the system is not registered with the SUSE Customer Center, register the system against the correct subscription.

If the system requires Long-Term Service Pack Support (LTSS), obtain the correct LTSS subscription for the system.

Check Contents

Verify the SUSE operating system is a vendor-supported release.

Use the following command to verify the SUSE operating system is a vendor-supported release:

# cat /etc/os-release

NAME="SLES"

VERSION="12"

Current End of Life for SLES 12 General Support is 31 Oct 2024 and Long-term Support is until 31 Oct 2027.

If the release is not supported by the vendor, this is a finding.

Vulnerability Number

V-217101

Documentable

False

Rule Version

SLES-12-010000

Severity Override Guidance

Verify the SUSE operating system is a vendor-supported release.

Use the following command to verify the SUSE operating system is a vendor-supported release:

# cat /etc/os-release

NAME="SLES"

VERSION="12"

Current End of Life for SLES 12 General Support is 31 Oct 2024 and Long-term Support is until 31 Oct 2027.

If the release is not supported by the vendor, this is a finding.

Check Content Reference

M

Target Key

4033

Comments