Rhel 9 — Rego Policies for OPA

10 open-source Rego policies encoding benchmarks/stig/rhel_9 policies. Apache 2.0, Rego v1, ready to load into OPA or Enterprise OPA.

What this is

10 Rego policy files encoding benchmarks/stig/rhel_9 policies, part of the Rego Policy Libraries — a standalone, dependency-free collection of Open Policy Agent policies for published security and compliance standards. No orchestrator, no agent, no vendor runtime.

Load and query it

git clone https://github.com/ynotbhatc/rego_policy_libraries.git
opa eval -d rego_policy_libraries/benchmarks/stig/rhel_9 -f pretty 'data'

Or load into a running OPA:

for f in rego_policy_libraries/benchmarks/stig/rhel_9/*.rego; do
  curl -X PUT --data-binary @"$f" "$OPA/v1/policies/$(basename $f .rego)"
done

Two ways to use these policies

Gating a change of state — evaluate a proposed action before it proceeds, and refuse it if it violates the standard. Measuring state — evaluate collected facts about an environment against the standard to produce compliance evidence. The same policy content serves both; only the integration differs.

Policy modules

account_auth.rego stig.rhel_9.account_auth
audit_logging.rego stig.rhel_9.audit_logging
configuration_management.rego stig.rhel_9.configuration_management
file_permissions.rego stig.rhel_9.file_permissions
network.rego stig.rhel_9.network
pki_crypto.rego stig.rhel_9.pki_crypto
services.rego stig.rhel_9.services
software_integrity.rego stig.rhel_9.software_integrity
ssh_config.rego stig.rhel_9.ssh_config
stig_rhel9_complete.rego stig.rhel_9

Contributing