Detections
Analytics
SLES-15-010036 - The SUSE operating system must use FIPS 140-3-approved cryptographic algorithms for IP tunnels.
Information
Overriding the systemwide cryptographic policy makes the behavior of the Libreswan service violate expectations and makes system configuration more fragmented.Solution
Configure the SUSE operating system so that Libreswan uses the systemwide cryptographic policy.Add the following line to "/etc/ipsec.conf":
include /etc/crypto-policies/back-ends/libreswan.config
See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_SLES_15_V2R8_STIG.zip
Item Details
Audit Name: DISA SUSE Linux Enterprise Server 15 STIG v2r8
Category: ACCESS CONTROL
References: 800-53|AC-17(2), CAT|I, CCI|CCI-000068, Rule-ID|SV-284952r1208920_rule, STIG-ID|SLES-15-010036, Vuln-ID|V-284952
Plugin: Unix
Control ID: 88a65cf4a560fb7293a7bab8fd441961bc364300b845c0d16b3c429a2b6a5adc