STIGQter: STIG Summary: Dragos Platform 2.x Security Technical Implementation Guide Version: 1 Release: 6 Benchmark Date: 01 Apr 2026:

The Dragos Platform must have disk encryption enabled on a virtual machines (VMs).

DISA Rule

SV-270945r1107130_rule

Vulnerability Number

V-270945

Group Title

SRG-APP-000126

Rule Version

DRAG-OT-000500

Severity

CAT II

CCI(s)

• CCI-001350 - Implement cryptographic mechanisms to protect the integrity of audit information.

Weight

10

Fix Recommendation

If Dragos is running on an appliance, this check is Not Applicable.

If the hypervisor is using full disk encryption, this check is Not Applicable.

LUKS (Linux Unified Key Setup):
During the installation process, most Linux distributions provide an option to encrypt the disk. Select this option to set up encryption.

To encrypt an existing installation, use tools such as cryptsetup to set up encryption manually. Here is a general guide:

Execute the following (Replace /dev/sdX with the appropriate device name):

sudo cryptsetup luksFormat /dev/sdX
sudo cryptsetup open /dev/sdX encrypted_disk
sudo mkfs.ext4 /dev/mapper/encrypted_disk
sudo mount /dev/mapper/encrypted_disk /mnt

Check Contents

If Dragos is running on an appliance, this check is Not Applicable.

If the hypervisor is using full disk encryption, this check is Not Applicable.

Check for disk encryption in a VM.

Log into the VM and access the VM using remote access method, such as SSH.

Use Built-in Tools or Commands:
Linux:
1. Open a terminal window.

2. Use the following command to check if any encrypted partitions exist:
lsblk -o NAME,FSTYPE,LABEL,UUID,SIZE,MOUNTPOINT,TYPE

3. Check for partitions with the filesystem type "crypto_LUKS" or similar.

4. Use the following command to list encrypted volumes:
cryptsetup luksDump /dev/sdX
(Replace /dev/sdX with the appropriate device name)

If volumes are not encrypted, this is a finding.

Vulnerability Number

V-270945

Documentable

False

Rule Version

DRAG-OT-000500

Severity Override Guidance

If Dragos is running on an appliance, this check is Not Applicable.

If the hypervisor is using full disk encryption, this check is Not Applicable.

Check for disk encryption in a VM.

Log into the VM and access the VM using remote access method, such as SSH.

Use Built-in Tools or Commands:
Linux:
1. Open a terminal window.

2. Use the following command to check if any encrypted partitions exist:
lsblk -o NAME,FSTYPE,LABEL,UUID,SIZE,MOUNTPOINT,TYPE

3. Check for partitions with the filesystem type "crypto_LUKS" or similar.

4. Use the following command to list encrypted volumes:
cryptsetup luksDump /dev/sdX
(Replace /dev/sdX with the appropriate device name)

If volumes are not encrypted, this is a finding.

Check Content Reference

M

Target Key

5675