Install rng-tools Package
An XCCDF Rule
Description
The rng-tools
package can be installed with the following command:
$ sudo yum install rng-tools
Rationale
rng-tools
provides hardware random number generator tools,
such as those used in the formation of x509/PKI certificates.
- ID
- xccdf_org.ssgproject.content_rule_package_rng-tools_installed
- Severity
- Low
- References
- Updated
Remediation - Puppet
include install_rng-tools
class install_rng-tools {
package { 'rng-tools':
ensure => 'installed',
}
Remediation - Ansible
- name: Gather the package facts
package_facts:
manager: auto
tags:
- enable_strategy
- low_complexity
Remediation - OS Build Blueprint
[[packages]]
name = "rng-tools"
version = "*"
Remediation - Anaconda Pre-Install Instructions
package --add=rng-tools
Remediation - Shell Script
# Remediation is applicable only in certain platforms
if ( ! ( [ "$(sysctl -a | grep -c 'fips_enabled.*1')" -eq 1 ] ) && rpm --quiet -q kernel ); then
if ! rpm -q --quiet "rng-tools" ; then
yum install -y "rng-tools"
fi