Detections
Analytics
SLES-15-010035 - The SUSE operating system must have the crypto-policies package installed.
Information
Centralized cryptographic policies simplify applying secure ciphers across an operating system and the applications that run on that operating system. Use of weak or untested encryption algorithms undermines the purposes of using encryption to protect data.SLES15 does not use the unified crypto-policies framework by default, and the crypto-policies-scripts package will need to be installed to use the framework.
Satisfies: SRG-OS-000396-GPOS-00176, SRG-OS-000393-GPOS-00173, SRG-OS-000394-GPOS-00174
Solution
Configure the SUSE operating system to use the crypto-policies framework.Install the crypto-policies packages (if the package is not already installed) with the following command:
> sudo zypper install crypto-policies
> sudo zypper install crypto-policies-scripts
See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_SLES_15_V2R8_STIG.zip
Item Details
Audit Name: DISA SUSE Linux Enterprise Server 15 STIG v2r8
Category: SYSTEM AND COMMUNICATIONS PROTECTION
References: 800-53|SC-13, CAT|I, CCI|CCI-002450, Rule-ID|SV-284950r1208919_rule, STIG-ID|SLES-15-010035, Vuln-ID|V-284950
Plugin: Unix
Control ID: d3f6b07e3cc8ba03e0109ba908152ac13d2f3afe7a03eded00a5f4b41cbc9e37