RHEL 9 cryptographic policy must not be overridden.
An XCCDF Rule
Description
Centralized cryptographic policies simplify applying secure ciphers across an operating system and the applications that run on that operating system. Use of weak or untested encryption algorithms undermines the purposes of using encryption to protect data. Satisfies: SRG-OS-000396-GPOS-00176, SRG-OS-000393-GPOS-00173, SRG-OS-000394-GPOS-00174
- ID
- SV-258236r1051253_rule
- Version
- RHEL-09-672020
- Severity
- High
- References
- Updated
Remediation Templates
A Manual Procedure
Configure RHEL 9 to correctly implement the systemwide cryptographic policies by reinstalling the crypto-policies package contents.
Reinstall crypto-policies with the following command:
$ sudo dnf -y reinstall crypto-policies