Skip to content
ATO Pathways
  Log In

Install cryptsetup Package

An XCCDF Rule

Description

The cryptsetup package can be installed with the following command: 

$ sudo yum install cryptsetup

Rationale

LUKS is the upcoming standard for Linux hard disk encryption. By providing a standard on-disk format, it does not only facilitate compatibility among distributions, but also provide secure management of multiple user passwords. In contrast to existing solution, LUKS stores all necessary setup information in the partition header, enabling the user to transport or migrate their data seamlessly. LUKS for dm-crypt is implemented in cryptsetup.

ID
xccdf_org.ssgproject.content_rule_package_cryptsetup-luks_installed
Severity
Medium
References
Updated



Remediation - Shell Script


if ! rpm -q --quiet "cryptsetup" ; then
    yum install -y "cryptsetup"
fi

Remediation - Puppet

include install_cryptsetup

class install_cryptsetup {
  package { 'cryptsetup':
    ensure => 'installed',
  }

Remediation - Ansible

- name: Ensure cryptsetup is installed
  package:
    name: cryptsetup
    state: present
  tags:
  - PCI-DSSv4-3.5

Remediation - OS Build Blueprint


[[packages]]
name = "cryptsetup"
version = "*"

Remediation - Anaconda Pre-Install Instructions


package --add=cryptsetup