Skip to content

AlmaLinux OS 9 must enable the hardware random number generator entropy gatherer service.

An XCCDF Rule

Description

The most important characteristic of a random number generator is its randomness, specifically its ability to deliver random numbers that are impossible to predict. Entropy in computer security is associated with the unpredictability of a source of randomness. The random source with high entropy tends to achieve a uniform distribution of random values. Random number generators are one of the most important building blocks of cryptosystems. The rngd service feeds random data from hardware device to kernel random device. Quality (nonpredictable) random number generation is important for several security functions (i.e., ciphers).

ID
SV-269297r1050179_rule
Version
ALMA-09-024550
Severity
Medium
References
Updated

Remediation Templates

A Manual Procedure

Install the rng-tools package with the following command:

$ dnf install rng-tools

Then enable the rngd service run the following command:

$ systemctl enable --now rngd