STIGUI
V-271477CAT I — High severitySV-271477r1190784_rule

OL 9 must have the crypto-policies package installed.

Rule version OL09-00-000240 · STIG v1 · 2026-08-21

Discussion

Centralized cryptographic policies simplify applying secure ciphers across an operating system and the applications that run on that operating system. Use of weak or untested encryption algorithms undermines the purposes of using encryption to protect data.

Satisfies: SRG-OS-000396-GPOS-00176, SRG-OS-000393-GPOS-00173, SRG-OS-000394-GPOS-00174

Check

Verify the OL 9 crypto-policies package is installed with the following command:

$ dnf list --installed crypto-policies Installed Packages crypto-policies.noarch 20240202-1.git283706d.el9 @ol9_baseos_latest

If the crypto-policies package is not installed, this is a finding.

Fix

Install the crypto-policies package (if not already installed) with the following command:

$ sudo dnf install -y crypto-policies

Identifiers

Group ID
V-271477
Group title
SRG-OS-000396-GPOS-00176
Rule ID
SV-271477r1190784_rule
Check ID
C-75527r1190783_chk
Fix ID
F-75434r1091142_fix