BaselineWatch
Apply as published
Desk

Linux RHEL-10-200730

DISA STIG RHEL-10-200730 (CAT II): RHEL 10 must have the "pkcs11-provider" package installed.

DISA STIG recommends

RHEL-10-200730 CAT II

RHEL 10 must have the "pkcs11-provider" package installed.

NIST SP 800-53: IA-2(1), IA-2(6), IA-2(12)

Check

Note: If the system administrator demonstrates the use of an approved alternate multifactor authentication method, this requirement is not applicable. Verify RHEL 10 has the "pkcs11-provider" package installed with the following command: $ sudo dnf list --installed pkcs11-provider Installed Packages pkcs11-provider.x86_64 1.0-3.el10_0 @rhel-10-for-x86_64-baseos-rpms If the "pkcs11-provider" package is not installed, this is a finding.

Fix

Configure RHEL 10 to have the "pkcs11-provider" package installed with the following command: $ sudo dnf -y install pkcs11-provider

Our decision

Apply as published

No decision recorded: the recommendation stands. The owner signs in to change it.

All Linux decisions · The Linux baseline · The Linux test plan