STIGQter: STIG Summary: Oracle Linux 9 Security Technical Implementation Guide Version: 1 Release: 6 Benchmark Date: 01 Jul 2026:

OL 9 must have the libreswan package installed.

DISA Rule

SV-271517r1101885_rule

Vulnerability Number

V-271517

Group Title

SRG-OS-000120-GPOS-00061

Rule Version

OL09-00-000410

Severity

CAT II

CCI(s)

• CCI-000803 - Implement mechanisms for authentication to a cryptographic module that meet the requirements of applicable laws, Executive Orders, directives, policies, regulations, standards, and guidance for such authentication.

Weight

10

Fix Recommendation

Install the libreswan service (if it is not already installed) with the following command:

$ sudo dnf install -y libreswan

Check Contents

Note: If there is no operational need for Libreswan to be installed, this rule is not applicable.

Verify that OL 9 libreswan service package is installed.

Check that the libreswan service package is installed with the following command:

$ dnf list --installed libreswan
Installed Packages
libreswan.x86_64 4.12-2.0.1.el9_4.1 @ol9_appstream

If the libreswan package is not installed, this is a finding.

Vulnerability Number

V-271517

Documentable

False

Rule Version

OL09-00-000410

Severity Override Guidance

Note: If there is no operational need for Libreswan to be installed, this rule is not applicable.

Verify that OL 9 libreswan service package is installed.

Check that the libreswan service package is installed with the following command:

$ dnf list --installed libreswan
Installed Packages
libreswan.x86_64 4.12-2.0.1.el9_4.1 @ol9_appstream

If the libreswan package is not installed, this is a finding.

Check Content Reference

M

Target Key

5680