STIGQter: STIG Summary: Red Hat Enterprise Linux 10 Security Technical Implementation Guide Version: 1 Release: 2 Benchmark Date: 01 Jul 2026:

RHEL 10 must have the "crypto-policies" package installed.

DISA Rule

SV-281007r1195399_rule

Vulnerability Number

V-281007

Group Title

SRG-OS-000396-GPOS-00176

Rule Version

RHEL-10-300000

Severity

CAT I

CCI(s)

• CCI-002450 - Implement organization-defined types of cryptography for each specified cryptography use.
• CCI-002890 - Implement organization-defined cryptographic mechanisms to protect the integrity of nonlocal maintenance and diagnostic communications.
• CCI-003123 - Implement organization-defined cryptographic mechanisms to protect the confidentiality of nonlocal maintenance and diagnostic communications.

Weight

10

Fix Recommendation

Configure RHEL 10 to have the "crypto-policies" package installed with the following command:

$ sudo dnf -y install crypto-policies

Check Contents

Verify RHEL 10 has the "crypto-policies" package installed with the following command:

$ sudo dnf list --installed crypto-policies
Installed Packages
crypto-policies.noarch 20250214-1.gitfd9b9b9.el10_0.1 @rhel-10-for-x86_64-baseos-rpms

If the "crypto-policies" package is not installed, this is a finding.

Vulnerability Number

V-281007

Documentable

False

Rule Version

RHEL-10-300000

Severity Override Guidance

Verify RHEL 10 has the "crypto-policies" package installed with the following command:

$ sudo dnf list --installed crypto-policies
Installed Packages
crypto-policies.noarch 20250214-1.gitfd9b9b9.el10_0.1 @rhel-10-for-x86_64-baseos-rpms

If the "crypto-policies" package is not installed, this is a finding.

Check Content Reference

M

Target Key

5733