Detections
Analytics
RHEL-10-300070 - RHEL 10 must use FIPS 140-3-approved cryptographic algorithms for IP tunnels.
Information
Overriding the systemwide cryptographic policy makes the behavior of the Libreswan service violate expectations and makes system configuration more fragmented.Solution
Configure RHEL 10 so that Libreswan uses the systemwide cryptographic policy.Add the following line to "/etc/ipsec.conf":
include /etc/crypto-policies/back-ends/libreswan.config
See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_RHEL_10_V1R3_STIG.zip
Item Details
Audit Name: DISA Red Hat Enterprise Linux 10 STIG v1r3
Category: ACCESS CONTROL
References: 800-53|AC-17(2), CAT|I, CCI|CCI-000068, Rule-ID|SV-281014r1268222_rule, STIG-ID|RHEL-10-300070, Vuln-ID|V-281014
Plugin: Unix
Control ID: f2ced44d73784da5d2b96c91225918754cb11aaac2ee3c5c322db753f26924b7