Skip to content
Log In

Install cryptsetup Package

An XCCDF Rule

Description

The cryptsetup package can be installed with the following command: 
$ sudo dnf install cryptsetup

Rationale

LUKS is the upcoming standard for Linux hard disk encryption. By providing a standard on-disk format, it does not only facilitate compatibility among distributions, but also provide secure management of multiple user passwords. In contrast to existing solution, LUKS stores all necessary setup information in the partition header, enabling the user to transport or migrate their data seamlessly. LUKS for dm-crypt is implemented in cryptsetup.

ID
xccdf_org.ssgproject.content_rule_package_cryptsetup-luks_installed
Severity
Medium
References
Updated

Remediation Templates

A Puppet Snippet

include install_cryptsetup
class install_cryptsetup {
  package { 'cryptsetup':
    ensure => 'installed',
  }
}

An Ansible Snippet

- name: Ensure cryptsetup is installed
  package:
    name: cryptsetup
    state: present
  tags:
  - PCI-DSSv4-3.5

script:kickstart

package install cryptsetup

OS Build Blueprint

[[packages]]
name = "cryptsetup"
version = "*"

script:bootc

dnf install cryptsetup

Anaconda Pre-Install Instructions

package --add=cryptsetup

A Shell Script

if ! rpm -q --quiet "cryptsetup" ; then
    dnf install -y "cryptsetup"
fi