STIGQter: STIG Summary: Cloud Linux AlmaLinux OS 9 Security Technical Implementation Guide Version: 1 Release: 7 Benchmark Date: 01 Jul 2026:

AlmaLinux OS 9 fapolicy module must be enabled.

DISA Rule

SV-269330r1050212_rule

Vulnerability Number

V-269330

Group Title

SRG-OS-000370-GPOS-00155

Rule Version

ALMA-09-028290

Severity

CAT II

CCI(s)

• CCI-001774 - Employ a deny-all, permit-by-exception policy to allow the execution of authorized software programs on the system.

Weight

10

Fix Recommendation

Enable the fapolicyd with the following command:

$ systemctl enable --now fapolicyd

Check Contents

Verify that AlmaLinux OS 9 fapolicyd is active with the following command:

$ systemctl status fapolicyd

fapolicyd.service - File Access Policy Daemon
Loaded: loaded (/usr/lib/systemd/system/fapolicyd.service; enabled; preset: disabled)
Active: active (running) since Thu 2024-02-08 09:42:05 UTC; 3h 38min ago

If fapolicyd module is not active, this is a finding.

Vulnerability Number

V-269330

Documentable

False

Rule Version

ALMA-09-028290

Severity Override Guidance

Verify that AlmaLinux OS 9 fapolicyd is active with the following command:

$ systemctl status fapolicyd

fapolicyd.service - File Access Policy Daemon
Loaded: loaded (/usr/lib/systemd/system/fapolicyd.service; enabled; preset: disabled)
Active: active (running) since Thu 2024-02-08 09:42:05 UTC; 3h 38min ago

If fapolicyd module is not active, this is a finding.

Check Content Reference

M

Target Key

5664