Detections
Analytics
SLES-15-010045 - The SUSE operating system must implement a FIPS 140-3-compliant systemwide cryptographic policy.
Information
Centralized cryptographic policies simplify applying secure ciphers across an operating system and the applications that run on that operating system. Use of weak or untested encryption algorithms undermines the purposes of using encryption to protect data.Satisfies: SRG-OS-000396-GPOS-00176, SRG-OS-000393-GPOS-00173, SRG-OS-000394-GPOS-00174
Solution
Configure the SUSE operating system to use a FIPS 140-3-compliant systemwide cryptographic policy.Set the systemwide crypto-policy to FIPS with the following command:
> sudo update-crypto-policies --set FIPS
Setting system policy to FIPS
Note: Systemwide crypto-policies are applied on application startup. It is recommended to restart the system for the change of policies to fully take place.
See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_SLES_15_V2R8_STIG.zip
Item Details
Audit Name: DISA SUSE Linux Enterprise Server 15 STIG v2r8
Category: SYSTEM AND COMMUNICATIONS PROTECTION
References: 800-53|SC-13, CAT|I, CCI|CCI-002450, Rule-ID|SV-284951r1208921_rule, STIG-ID|SLES-15-010045, Vuln-ID|V-284951
Plugin: Unix
Control ID: 9e164f620a1d9441797c32b9eba1b44bff6edd23171eabd4004ba66e0fea7e27