An XCCDF Group - A logical subset of the XCCDF Benchmark
libreswan
$ sudo dnf install libreswan
/etc/ipsec.d
$ sudo chgrp root /etc/ipsec.d
$ sudo chown root /etc/ipsec.d
$ sudo chmod 0700 /etc/ipsec.d
/etc/ipsec.conf
$ sudo chgrp root /etc/ipsec.conf
/etc/ipsec.secrets
$ sudo chgrp root /etc/ipsec.secrets
$ sudo chown root /etc/ipsec.conf
$ sudo chown root /etc/ipsec.secrets
$ sudo chmod 0644 /etc/ipsec.conf
$ sudo chmod 0644 /etc/ipsec.secrets