STIGQter: STIG Summary: SUSE Linux Enterprise Micro (SLEM) 5 Security Technical Implementation Guide Version: 1 Release: 4 Benchmark Date: 01 Apr 2026:

SLEM 5 must have the packages required for multifactor authentication to be installed.

DISA Rule

SV-261396r996610_rule

Vulnerability Number

V-261396

Group Title

SRG-OS-000375-GPOS-00160

Rule Version

SLEM-05-612010

Severity

CAT II

CCI(s)

• CCI-001953 - Accepts Personal Identity Verification-compliant credentials.
• CCI-001954 - Electronically verifies Personal Identity Verification-compliant credentials.

Weight

10

Fix Recommendation

Configure SLEM 5 to implement multifactor authentication by installing the required packages.

Install the packages required to support multifactor authentication with the following commands:

> sudo transactional-update pkg install pam_pkcs11

> sudo reboot

> sudo transactional-update pkg install mozilla-nss

> sudo reboot

> sudo transactional-update pkg install mozilla-nss-tools

> sudo reboot

> sudo transactional-update pkg install pcsc-ccid

> sudo reboot

> sudo transactional-update pkg install pcsc-lite

> sudo reboot

> sudo transactional-update pkg install pcsc-tools

> sudo reboot

> sudo transactional-update pkg install opensc

> sudo reboot

> sudo transactional-update pkg install coolkey

> sudo reboot

Additional information on the configuration of multifactor authentication on SLEM 5 can be found at https://www.suse.com/communities/blog/configuring-smart-card-authentication-suse-linux-enterprise/.

Check Contents

Verify SLEM 5 has the packages required for multifactor authentication installed.

Check for the presence of the packages required to support multifactor authentication with the following commands:

> zypper info pam_pkcs11 | grep -i installed
Installed: Yes

> zypper info mozilla-nss | grep -i installed
Installed: Yes

> zypper info mozilla-nss-tools | grep -i installed
Installed: Yes

> zypper info pcsc-ccid | grep -i installed
Installed: Yes

> zypper info pcsc-lite | grep -i installed
Installed: Yes

> zypper info pcsc-tools | grep -i installed
Installed: Yes

> zypper info opensc | grep -i installed
Installed: Yes

> zypper info coolkey | grep -i installed
Installed: Yes

If any of the packages required for multifactor authentication are not installed, this is a finding.

Vulnerability Number

V-261396

Documentable

False

Rule Version

SLEM-05-612010

Severity Override Guidance

Verify SLEM 5 has the packages required for multifactor authentication installed.

Check for the presence of the packages required to support multifactor authentication with the following commands:

> zypper info pam_pkcs11 | grep -i installed
Installed: Yes

> zypper info mozilla-nss | grep -i installed
Installed: Yes

> zypper info mozilla-nss-tools | grep -i installed
Installed: Yes

> zypper info pcsc-ccid | grep -i installed
Installed: Yes

> zypper info pcsc-lite | grep -i installed
Installed: Yes

> zypper info pcsc-tools | grep -i installed
Installed: Yes

> zypper info opensc | grep -i installed
Installed: Yes

> zypper info coolkey | grep -i installed
Installed: Yes

If any of the packages required for multifactor authentication are not installed, this is a finding.

Check Content Reference

M

Target Key

5596