Detections
Analytics

1.20 ALMA-09-004320

Information

AlmaLinux OS 9 must use the TuxCare FIPS packages and not the default encryption packages.

GROUP ID: V-269126
RULE ID: SV-269126r1107617

FIPS 140-3-validated packages are available from TuxCare here: https://tuxcare.com/fips-for-almalinux/

The original community packages must be replaced with the versions that have gone through the CMVP.

Satisfies: SRG-OS-000033-GPOS-00014, SRG-OS-000478-GPOS-00223, SRG-OS-000396-GPOS-00176, SRG-OS-000125-GPOS-00065

NOTE: Nessus has provided the target output to assist in reviewing the benchmark to ensure target compliance.

Solution

Ensure FIPS-validated packages are in use instead of OS defaults using the following commands:

$ dnf -y upgrade

$ reboot

After rebooting into a FIPS kernel, remove the OS default kernel packages, using for example:

$ dnf remove kernel-5.14.0-284.11.1.el9_2.x86_64 kernel-5.14.0-284.30.1.el9_2.x86_64

$ dnf autoremove

See Also

https://workbench.cisecurity.org/benchmarks/27039

Item Details

Category: ACCESS CONTROL, MAINTENANCE, SYSTEM AND COMMUNICATIONS PROTECTION

References: 800-53|AC-17(2), 800-53|MA-4c., 800-53|SC-13, CCI|CCI-000068, CCI|CCI-000877, CCI|CCI-002450, Rule-ID|SV-269126r1107617_rule, STIG-ID|ALMA-09-004320, Vuln-ID|V-269126

Plugin: Unix

Control ID: f06137370acea69d371a5c15ff2921d61741aa953f73908e7b2d7e852aa1ebfe