STIGQter: STIG Summary: Red Hat Enterprise Linux 9 Security Technical Implementation Guide Version: 2 Release: 9 Benchmark Date: 01 Jul 2026:

RHEL 9 libreswan package must be installed.

DISA Rule

SV-257954r1106315_rule

Vulnerability Number

V-257954

Group Title

SRG-OS-000480-GPOS-00227

Rule Version

RHEL-09-252065

Severity

CAT II

CCI(s)

• CCI-000803 - Implement mechanisms for authentication to a cryptographic module that meet the requirements of applicable laws, Executive Orders, directives, policies, regulations, standards, and guidance for such authentication.

Weight

10

Fix Recommendation

Install the libreswan service (if it is not already installed) with the following command:

$ sudo dnf install libreswan

Check Contents

Note: If there is no operational need for Libreswan to be installed, this rule is not applicable.

Verify that RHEL 9 libreswan service package is installed.

Check that the libreswan service package is installed with the following command:

$ dnf list --installed libreswan

Example output:

libreswan.x86_64 4.6-3.el9

If the "libreswan" package is not installed, this is a finding.

Vulnerability Number

V-257954

Documentable

False

Rule Version

RHEL-09-252065

Severity Override Guidance

Note: If there is no operational need for Libreswan to be installed, this rule is not applicable.

Verify that RHEL 9 libreswan service package is installed.

Check that the libreswan service package is installed with the following command:

$ dnf list --installed libreswan

Example output:

libreswan.x86_64 4.6-3.el9

If the "libreswan" package is not installed, this is a finding.

Check Content Reference

M

Target Key

5551