STIGQter: STIG Summary: Tri-Lab Operating System Stack (TOSS) 5 Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 26 Mar 2026:

TOSS 5 crypto policy files must match files shipped with the operating system.

DISA Rule

SV-282615r1201495_rule

Vulnerability Number

V-282615

Group Title

SRG-OS-000478-GPOS-00223

Rule Version

TOSS-05-000469

Severity

CAT I

CCI(s)

CCI-002450 - Implement organization-defined types of cryptography for each specified cryptography use.

Weight

Fix Recommendation

Reinstall the "crypto-policies" package to remove any modifications.

$ sudo dnf reinstall crypto-policies

Check Contents

Verify the TOSS 5 package "crypto-policies" has not been modified using the following command:

$ rpm -V crypto-policies

If the command has any output, this is a finding.

Vulnerability Number

V-282615

Documentable

False

Rule Version

TOSS-05-000469

Severity Override Guidance

Verify the TOSS 5 package "crypto-policies" has not been modified using the following command:

$ rpm -V crypto-policies

If the command has any output, this is a finding.

Check Content Reference

Target Key

5738