Detections
Analytics

1.47 AZLX-23-001195

Information

Amazon Linux 2023 must have the crypto-policies package installed.

GROUP ID: V-274040RULE ID: SV-274040r1120108

Centralized cryptographic policies simplify applying secure ciphers across an operating system and the applications that run on that operating system. Use of weak or untested encryption algorithms undermines the purposes of utilizing encryption to protect data.

Satisfies: SRG-OS-000396-GPOS-00176, SRG-OS-000393-GPOS-00173, SRG-OS-000394-GPOS-00174, SRG-OS-000424-GPOS-00188

Solution

Configure Amazon Linux 2023 to have the crypto-policies package installed with the following command:

$ sudo dnf install -y crypto-policies

See Also

https://workbench.cisecurity.org/benchmarks/26107

Item Details

Category: MAINTENANCE, SYSTEM AND COMMUNICATIONS PROTECTION

References: 800-53|MA-4(6), 800-53|SC-8(1), 800-53|SC-13, CAT|II, CCI|CCI-002421, CCI|CCI-002450, CCI|CCI-002890, CCI|CCI-003123, Rule-ID|SV-274040r1120108_rule, STIG-ID|AZLX-23-001195, Vuln-ID|V-274040

Plugin: Unix

Control ID: 1d4e84be9933433e076768c88311b96548ded284177cf3f66c82dced4bc53bc8