Detections
Analytics

1.19 ALMA-09-003870

Information

AlmaLinux OS 9 IP tunnels must use FIPS 140-3 approved cryptographic algorithms.

GROUP ID: V-269122
RULE ID: SV-269122r1184087

Overriding the system crypto policy makes the behavior of the Libreswan service violate expectations and makes the system configuration more fragmented.

Solution

Configure Libreswan to use the systemwide cryptographic policy.

Add the following line to "/etc/ipsec.conf":

include /etc/crypto-policies/back-ends/libreswan.config

See Also

https://workbench.cisecurity.org/benchmarks/27039

Item Details

Category: ACCESS CONTROL

References: 800-53|AC-17(2), CCI|CCI-000068, Rule-ID|SV-269122r1184087_rule, STIG-ID|ALMA-09-003870, Vuln-ID|V-269122

Plugin: Unix

Control ID: 6c0857df04bd56aa9162430991570107e343d2c7fdd0bdc503502b148d01ccba