STIGQter STIGQter: STIG Summary: Canonical Ubuntu 24.04 LTS Security Technical Implementation Guide Version: 1 Release: 6 Benchmark Date: 01 Jul 2026:

Ubuntu 24.04 LTS must accept Personal Identity Verification (PIV) credentials managed through the Privileged Access Management (PAM)  framework.

DISA Rule

SV-270673r1067164_rule

Vulnerability Number

V-270673

Group Title

SRG-OS-000376-GPOS-00161

Rule Version

UBTU-24-100910

Severity

CAT II

CCI(s)

Weight

10

Fix Recommendation

Configure Ubuntu 24.04 LTS to accept PIV credentials that are managed through the PAM framework.

Install the "libpam-pkcs11" package using the following command:

$ sudo apt install -y libpam-pkcs11

Check Contents

Verify the "libpam-pcks11" package is installed on the system with the following command:

$ dpkg -l | grep libpam-pkcs11
ii libpam-pkcs11 0.6.12-2build3 amd64 Fully featured PAM module for using PKCS#11 smart cards

If the "libpam-pcks11" package is not installed, this is a finding.

Vulnerability Number

V-270673

Documentable

False

Rule Version

UBTU-24-100910

Severity Override Guidance

Verify the "libpam-pcks11" package is installed on the system with the following command:

$ dpkg -l | grep libpam-pkcs11
ii libpam-pkcs11 0.6.12-2build3 amd64 Fully featured PAM module for using PKCS#11 smart cards

If the "libpam-pcks11" package is not installed, this is a finding.

Check Content Reference

M

Target Key

5673