Install strongswan Package
An XCCDF Rule
Description
The Strongswan package provides an implementation of IPsec
and IKE, which permits the creation of secure tunnels over
untrusted networks. The strongswan package can be installed with the following command:
$ sudo zypper install strongswan
Rationale
Providing the ability for remote users or systems to initiate a secure VPN connection protects information when it is transmitted over a wide area network.
- ID
- xccdf_org.ssgproject.content_rule_package_strongswan_installed
- Severity
- Medium
- References
- Updated
Remediation - OS Build Blueprint
[[packages]]
name = "strongswan"
version = "*"
Remediation - Ansible
- name: Ensure strongswan is installed
package:
name: strongswan
state: present
tags:
- CCE-91625-4
Remediation - Puppet
include install_strongswan
class install_strongswan {
package { 'strongswan':
ensure => 'installed',
}
Remediation - Shell Script
zypper install -y "strongswan"