Skip to content

Install rng-tools Package

An XCCDF Rule

Description

The rng-tools package can be installed with the following command:
$ sudo yum install rng-tools

Rationale

rng-tools provides hardware random number generator tools, such as those used in the formation of x509/PKI certificates.

ID
xccdf_org.ssgproject.content_rule_package_rng-tools_installed
Severity
Low
References
Updated

Remediation Templates

A Puppet Snippet

include install_rng-tools
class install_rng-tools {
  package { 'rng-tools':
    ensure => 'installed',
  }
}

OS Build Blueprint

[[packages]]
name = "rng-tools"
version = "*"

Anaconda Pre-Install Instructions

package --add=rng-tools

A Shell Script

# Remediation is applicable only in certain platforms
if ( ! ( [ "$(sysctl -a | grep -c 'fips_enabled.*1')" -eq 1 ] ) && rpm --quiet -q kernel ); then
if ! rpm -q --quiet "rng-tools" ; then
    yum install -y "rng-tools"
fi

An Ansible Snippet

- name: Gather the package facts
  package_facts:
    manager: auto
  tags:
  - enable_strategy
  - low_complexity