The Photon operating system must have the OpenSSL FIPS provider installed to protect the confidentiality of remote access sessions.
An XCCDF Rule
Description
Without confidentiality protection mechanisms, unauthorized individuals may gain access to sensitive information via a remote access session. OpenSSH on the Photon operating system when configured appropriately can utilize a FIPS validated OpenSSL for cryptographic operations. Satisfies: SRG-OS-000033-GPOS-00014, SRG-OS-000393-GPOS-00173, SRG-OS-000394-GPOS-00174, SRG-OS-000423-GPOS-00187, SRG-OS-000425-GPOS-00189, SRG-OS-000426-GPOS-00190
- ID
- SV-258806r933479_rule
- Version
- PHTN-40-000013
- Severity
- High
- References
- Updated
Remediation Templates
A Manual Procedure
At the command line, run the following command:
# tdnf install openssl-fips-provider