STIGQter: STIG Summary: Oracle Linux 8 Security Technical Implementation Guide Version: 2 Release: 9 Benchmark Date: 01 Jul 2026:

OL 8 must have the package required for multifactor authentication installed.

DISA Rule

SV-248586r1015037_rule

Vulnerability Number

V-248586

Group Title

SRG-OS-000375-GPOS-00160

Rule Version

OL08-00-010390

Severity

CAT III

CCI(s)

CCI-004046 - Implement multi-factor authentication for local; network; and/or remote access to privileged accounts; and/or non-privileged accounts such that one of the factors is provided by a device separate from the system gaining access.
CCI-004047 - Implement multi-factor authentication for local; network; and/or remote access to privileged accounts; and/or non-privileged accounts such that the device meets organization-defined strength of mechanism requirements.

Weight

Fix Recommendation

Configure OL 8 to implement multifactor authentication by installing the required package with the following command:

$ sudo yum install openssl-pkcs11

Check Contents

Verify the operating system has the package required for multifactor authentication installed with the following command:

$ sudo yum list installed openssl-pkcs11

openssl-pkcs11.x86_64 0.4.8-2.el8 @anaconda

If the "openssl-pkcs11" package is not installed, ask the administrator to indicate what type of multifactor authentication is being used and what packages are installed to support it.

If there is no evidence of multifactor authentication being used, this is a finding.

Vulnerability Number

V-248586

Documentable

False

Rule Version

OL08-00-010390

Severity Override Guidance

Check Content Reference

Target Key

5416