← Back to Red Hat Enterprise Linux 10 Security Technical Implementation Guide

V-281007

CAT I (High)

RHEL 10 must have the "crypto-policies" package installed.

Rule ID

SV-281007r1195399_rule

STIG

Red Hat Enterprise Linux 10 Security Technical Implementation Guide

Version

V1R1

CCIs

CCI-002450 CCI-002890 CCI-003123

Discussion

Centralized cryptographic policies simplify applying secure ciphers across an operating system and the applications that run on that operating system. Use of weak or untested encryption algorithms undermines the purposes of using encryption to protect data. Satisfies: SRG-OS-000396-GPOS-00176, SRG-OS-000393-GPOS-00173, SRG-OS-000394-GPOS-00174

Check Content

Verify RHEL 10 has the "crypto-policies" package installed with the following command:

$ sudo dnf list --installed crypto-policies
Installed Packages
crypto-policies.noarch                  20250214-1.gitfd9b9b9.el10_0.1                   @rhel-10-for-x86_64-baseos-rpms

If the "crypto-policies" package is not installed, this is a finding.

Fix Text

Configure RHEL 10 to have the "crypto-policies" package installed with the following command:

$ sudo dnf -y install crypto-policies