STIGUI
V-282601CAT I — High severitySV-282601r1200783_rule

TOSS 5 must have the crypto-policies package installed.

Rule version TOSS-05-000468 · STIG v1 · 2026-08-20

Discussion

Centralized cryptographic policies simplify applying secure ciphers across an operating system and the applications that run on that operating system. Use of weak or untested encryption algorithms undermines the purposes of using encryption to protect data.

Check

Verify the TOSS 5 "crypto-policies" package is installed using the following command:

$ sudo dnf list --installed crypto-policies

Example output:

crypto-policies.noarch 20220223-1.git5203b41.el9_0.1

If the "crypto-policies" package is not installed, this is a finding.

Fix

Install the "crypto-policies package" using the following command:

$ sudo dnf install crypto-policies

Identifiers

Group ID
V-282601
Group title
SRG-OS-000396-GPOS-00176
Rule ID
SV-282601r1200783_rule
Check ID
C-87162r1200781_chk
Fix ID
F-87067r1200782_fix