← Back to Tri-Lab Operating System Stack (TOSS) 5 Security Technical Implementation Guide

V-282601

CAT I (High)

TOSS 5 must have the crypto-policies package installed.

Rule ID

SV-282601r1200783_rule

STIG

Tri-Lab Operating System Stack (TOSS) 5 Security Technical Implementation Guide

Version

V1R1

CCIs

CCI-002450

Discussion

Centralized cryptographic policies simplify applying secure ciphers across an operating system and the applications that run on that operating system. Use of weak or untested encryption algorithms undermines the purposes of using encryption to protect data.

Check Content

Verify the TOSS 5 "crypto-policies" package is installed using the following command:

$ sudo dnf list --installed crypto-policies

Example output:

crypto-policies.noarch          20220223-1.git5203b41.el9_0.1

If the "crypto-policies" package is not installed, this is a finding.

Fix Text

Install the "crypto-policies package" using the following command:

$ sudo dnf install crypto-policies