RHEL-08-010030 - All RHEL 8 local disk partitions must implement cryptographic mechanisms to prevent unauthorized disclosure or modification of all information that requires at rest protection.

Warning! Audit Deprecated

This audit has been deprecated and will be removed in a future update.

View Next Audit Version


RHEL 8 systems handling data requiring 'data at rest' protections must employ cryptographic mechanisms to prevent unauthorized disclosure and modification of the information at rest.

Selection of a cryptographic mechanism is based on the need to protect the integrity of organizational information. The strength of the mechanism is commensurate with the security category and/or classification of the information. Organizations have the flexibility to either encrypt all information on storage devices (i.e., full disk encryption) or encrypt specific data structures (e.g., files, records, or fields).

Satisfies: SRG-OS-000185-GPOS-00079, SRG-OS-000404-GPOS-00183, SRG-OS-000405-GPOS-00184

NOTE: Nessus has provided the target output to assist in reviewing the benchmark to ensure target compliance.


Configure RHEL 8 to prevent unauthorized modification of all information at rest by using disk encryption.

Encrypting a partition in an already installed system is more difficult, because existing partitions will need to be resized and changed. To encrypt an entire partition, dedicate a partition for encryption in the partition layout.

See Also


Item Details

References: CAT|II, CCI|CCI-001199, Rule-ID|SV-230224r809268_rule, STIG-ID|RHEL-08-010030, Vuln-ID|V-230224

Plugin: Unix

Control ID: a3aa2c75974008cd3369877a448e7ce53b8fc23b445c5929553376c3b959186e