Install rng-tools Package
An XCCDF Rule
Description
Therng-tools
package can be installed with the following command:
$ sudo yum install rng-tools
Rationale
rng-tools
provides hardware random number generator tools,
such as those used in the formation of x509/PKI certificates.
- ID
- xccdf_org.ssgproject.content_rule_package_rng-tools_installed
- Severity
- Low
- References
- Updated
Remediation Templates
A Puppet Snippet
include install_rng-tools
class install_rng-tools {
package { 'rng-tools':
ensure => 'installed',
}
}
OS Build Blueprint
[[packages]]
name = "rng-tools"
version = "*"
Anaconda Pre-Install Instructions
package --add=rng-tools
A Shell Script
# Remediation is applicable only in certain platforms
if ( ! ( [ "$(sysctl -a | grep -c 'fips_enabled.*1')" -eq 1 ] ) && rpm --quiet -q kernel ); then
if ! rpm -q --quiet "rng-tools" ; then
yum install -y "rng-tools"
fi
An Ansible Snippet
- name: Gather the package facts
package_facts:
manager: auto
tags:
- enable_strategy
- low_complexity