Skip to content
Log In

Install libreswan Package

An XCCDF Rule

Description

The libreswan package provides an implementation of IPsec and IKE, which permits the creation of secure tunnels over untrusted networks. The libreswan package can be installed with the following command: 
$ sudo dnf install libreswan

Rationale

Providing the ability for remote users or systems to initiate a secure VPN connection protects information when it is transmitted over a wide area network.

ID
xccdf_org.ssgproject.content_rule_package_libreswan_installed
Severity
Medium
References
Updated

Remediation Templates

An Ansible Snippet

- name: Ensure libreswan is installed
  package:
    name: libreswan
    state: present
  tags:
  - NIST-800-53-CM-6(a)

script:kickstart

package install libreswan

OS Build Blueprint

[[packages]]
name = "libreswan"
version = "*"

script:bootc

dnf install libreswan

A Puppet Snippet

include install_libreswan
class install_libreswan {
  package { 'libreswan':
    ensure => 'installed',
  }
}

Anaconda Pre-Install Instructions

package --add=libreswan

A Shell Script

if ! rpm -q --quiet "libreswan" ; then
    dnf install -y "libreswan"
fi