Detections
Analytics

1.6.1 Ensure crypto-policies-scripts package is installed

Information

This package provides a tool update-crypto-policies, which applies the policies provided by the crypto-policies package. These can be either the pre-built policies from the base package or custom policies defined in simple policy definition files.

The package also provides a tool fips-mode-setup, which can be used to enable or disable the system FIPS mode.

update-crypto-policies is used to set the policy applicable for the various cryptographic back-ends, such as SSL/TLS libraries. The policy aims to control the back-end default algorithm selections unless the application user configures them otherwise.

Solution

Run the following command to install crypto-policies-scripts :

# zypper install crypto-policies-scripts

See Also

https://workbench.cisecurity.org/benchmarks/26236

Item Details

Category: ACCESS CONTROL, IDENTIFICATION AND AUTHENTICATION, SYSTEM AND COMMUNICATIONS PROTECTION

References: 800-53|AC-17(2), 800-53|IA-5, 800-53|IA-5(1), 800-53|SC-8, 800-53|SC-8(1), CSCv7|14.4

Plugin: Unix

Control ID: e8a095e04a73b0e26dc0db115222eb646538c3376e6e071339df6a3de2553461