STIGQter: STIG Summary: Amazon Linux 2023 Security Technical Implementation Guide Version: 1 Release: 4 Benchmark Date: 01 Jul 2026:

Amazon Linux 2023 must have the libreswan package installed.

DISA Rule

SV-274032r1184010_rule

Vulnerability Number

V-274032

Group Title

SRG-OS-000120-GPOS-00061

Rule Version

AZLX-23-001105

Severity

CAT II

CCI(s)

• CCI-000803 - Implement mechanisms for authentication to a cryptographic module that meet the requirements of applicable laws, Executive Orders, directives, policies, regulations, standards, and guidance for such authentication.

Weight

10

Fix Recommendation

Configure Amazon Linux 2023 to have the libreswan package installed with the following command:

$ sudo dnf install -y libreswan

Check Contents

Note: If there is no operational need for libreswan to be installed, this rule is not applicable.

Verify Amazon Linux 2023 has the libreswan package installed with the following command:

$ dnf list --installed libreswan
Installed Packages
libreswan.x86_64 4.12-3.amzn2023.0.2 @amazonlinux

If the "libreswan" package is not installed, this is a finding.

Vulnerability Number

V-274032

Documentable

False

Rule Version

AZLX-23-001105

Severity Override Guidance

Note: If there is no operational need for libreswan to be installed, this rule is not applicable.

Verify Amazon Linux 2023 has the libreswan package installed with the following command:

$ dnf list --installed libreswan
Installed Packages
libreswan.x86_64 4.12-3.amzn2023.0.2 @amazonlinux

If the "libreswan" package is not installed, this is a finding.

Check Content Reference

M

Target Key

5700