Red Hat Enterprise Linux 7: End of compliance content on June 30, 2024

As of Jun 30, 2024, the Red Hat Enterprise Linux (RHEL) 7 maintenance support 2 phase ends and Red Hat will no longer update compliance content for RHEL 7. Many policy providers, such as CIS and DISA, will no longer update their policies once maintenance ends.

When this support phase ends, you can expect:

The RHEL 7 scap-security-guide package will no longer be updated. You can continue to use the content provided after Jun 30, 2024. The content is mature, stable, and still suitable for use by Extended Update Support (EUS) customers after the end of maintenance, however as mentioned before there are no updates planned.  

Additionally, the Center for Internet Security (CIS) and Defense Information Systems Agency (DISA) will no longer publish updates to their RHEL 7 profiles . CIS stated that version 4.0.0 will be the final release of their RHEL 7 benchmark. DISA typically ends support of a STIG after the maintenance phase ends, which can be expected in the case of the RHEL 7 STIG.

Resources to Help Plan Your Upgrade

If you plan on upgrading as a result of the end of this support phase, RHEL 8 and RHEL 9 each have a STIG, with automation available for both. This automation can be run with Red Hat Insights, Ansible, Satellite, all of this automation is powered by OpenSCAP.

Red Hat has the resources, tools, and consulting offerings you need to keep your systems running and keep up with the latest benefits that Red Hat Enterprise Linux has to offer. Get started by: 

• Determining which version is best for you
• Outlining steps for your upgrade project
• Keeping track of important dates
• Finding resources to ease your transition

The Red Hat Enterprise Linux upgrade page has those upgrade resources and more. Red Hat has resources to help plan your upgrade.