Detections
Analytics
ALMA-09-003870 - AlmaLinux OS 9 IP tunnels must use FIPS 140-3 approved cryptographic algorithms.
Information
Overriding the system crypto policy makes the behavior of the Libreswan service violate expectations and makes the system configuration more fragmented.Solution
Configure Libreswan to use the systemwide cryptographic policy.Add the following line to "/etc/ipsec.conf":
include /etc/crypto-policies/back-ends/libreswan.config
See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_CL_AlmaLinux_OS_9_V1R6_STIG.zip
Item Details
Audit Name: DISA Cloud Linux AlmaLinux OS 9 STIG v1r6
Category: ACCESS CONTROL
References: 800-53|AC-17(2), CAT|I, CCI|CCI-000068, Rule-ID|SV-269122r1184087_rule, STIG-ID|ALMA-09-003870, Vuln-ID|V-269122
Plugin: Unix
Control ID: 8d53778d6bacd4f6fc704409d4757c7e6796eaba83f691020221ac24728483f3