Skip to content
Log In

Install crypto-policies package

An XCCDF Rule

Description

The crypto-policies package can be installed with the following command: 
$ sudo yum install crypto-policies

Rationale

Centralized cryptographic policies simplify applying secure ciphers across an operating system and the applications that run on that operating system. Use of weak or untested encryption algorithms undermines the purposes of utilizing encryption to protect data.

ID
xccdf_org.ssgproject.content_rule_package_crypto-policies_installed
Severity
Medium
References
Updated

Remediation Templates

A Puppet Snippet

include install_crypto-policies
class install_crypto-policies {
  package { 'crypto-policies':
    ensure => 'installed',
  }
}

An Ansible Snippet

- name: Ensure crypto-policies is installed
  package:
    name: crypto-policies
    state: present
  tags:
  - enable_strategy

script:kickstart

package install crypto-policies

OS Build Blueprint

[[packages]]
name = "crypto-policies"
version = "*"

script:bootc

dnf install crypto-policies

Anaconda Pre-Install Instructions

package --add=crypto-policies

A Shell Script

if ! rpm -q --quiet "crypto-policies" ; then
    yum install -y "crypto-policies"
fi