STIGQter STIGQter: STIG Summary: Cloud Linux AlmaLinux OS 9 Security Technical Implementation Guide Version: 1 Release: 7 Benchmark Date: 01 Jul 2026:

AlmaLinux OS 9 must be configured so that the cryptographic hashes of system files match vendor values.

DISA Rule

SV-269292r1050174_rule

Vulnerability Number

V-269292

Group Title

SRG-OS-000480-GPOS-00227

Rule Version

ALMA-09-024000

Severity

CAT II

CCI(s)

Weight

10

Fix Recommendation

Given the output from the check command, identify the package that provides the output and reinstall it.

The following trimmed example output shows a package that has failed verification, been identified, reinstalled, and then passed re-verification:

$ rpm -Va --noconfig | awk '$1 ~ /..5/ && $2 != "c"'

S.5....T. /usr/bin/tar

$ dnf whatprovides /usr/bin/tar

tar-2:1.34-6.el9_1.x86_64 : GNU file archiving program

$ dnf reinstall tar

$ rpm -Va --noconfig | awk '$1 ~ /..5/ && $2 != "c"'

[no output]

Check Contents

The following command will list which files on the system have file hashes different from what is expected by the RPM database:

$ rpm -Va --noconfig | awk '$1 ~ /..5/ && $2 != "c"'

If there is an output, this is a finding.

Vulnerability Number

V-269292

Documentable

False

Rule Version

ALMA-09-024000

Severity Override Guidance

The following command will list which files on the system have file hashes different from what is expected by the RPM database:

$ rpm -Va --noconfig | awk '$1 ~ /..5/ && $2 != "c"'

If there is an output, this is a finding.

Check Content Reference

M

Target Key

5664