An XCCDF Group - A logical subset of the XCCDF Benchmark
libreswan
$ sudo yum install libreswan
conn
/etc/ipsec.conf
/etc/ipsec.d
$ sudo chgrp root /etc/ipsec.d
$ sudo chown root /etc/ipsec.d
$ sudo chmod 0700 /etc/ipsec.d
$ sudo chgrp root /etc/ipsec.conf
/etc/ipsec.secrets
$ sudo chgrp root /etc/ipsec.secrets
$ sudo chown root /etc/ipsec.conf
$ sudo chown root /etc/ipsec.secrets
$ sudo chmod 0644 /etc/ipsec.conf
$ sudo chmod 0644 /etc/ipsec.secrets