Detections
Analytics
RHEL-08-010280 - RHEL 8 IP tunnels must use FIPS 140-3-approved cryptographic algorithms.
Warning! Audit Deprecated
This audit has been deprecated and will be removed in a future update.
View Next Audit VersionInformation
Overriding the system crypto policy makes the behavior of the Libreswan service violate expectations and makes system configuration more fragmented.Solution
Configure Libreswan to use the system cryptographic policy.Add the following line to "/etc/ipsec.conf":
include /etc/crypto-policies/back-ends/libreswan.config
See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_RHEL_8_V2R6_STIG.zip
Item Details
Audit Name: DISA Red Hat Enterprise Linux 8 STIG v2r6
References: CAT|II, CCI|CCI-000068, Rule-ID|SV-279930r1156343_rule, STIG-ID|RHEL-08-010280, Vuln-ID|V-279930
Plugin: Unix
Control ID: 9882bfb962baadda853b116b3f871dd3b9099e581f7e790fdaa6e8d2f77bbf5c