When applying the RHEL7 DISA STIG checklist, Compliance is reporting 100% compliance on all checks on all RHEL7 systems in our environment (~80 systems). That’s hard for me to believe. Anyone else have similar results?
When applying the CIS checklist, we get more like 80% compliance and some variability among the checks.