STIGQter: STIG Summary: SUSE Linux Enterprise Server 15 Security Technical Implementation Guide Version: 2 Release: 8 Benchmark Date: 01 Jul 2026:

The SUSE operating system must have the crypto-policies package installed.

DISA Rule

SV-284950r1208919_rule

Vulnerability Number

V-284950

Group Title

SRG-OS-000396-GPOS-00176

Rule Version

SLES-15-010035

Severity

CAT I

CCI(s)

CCI-002450 - Implement organization-defined types of cryptography for each specified cryptography use.

Weight

Fix Recommendation

Configure the SUSE operating system to use the crypto-policies framework.

Install the crypto-policies packages (if the package is not already installed) with the following command:

> sudo zypper install crypto-policies
> sudo zypper install crypto-policies-scripts

Check Contents

Verify that the SUSE operating system uses the crypto-policies framework.

Verify that the crypto-policies packages are installed with the following command:

> sudo zypper se crypto-policies
Loading repository data...
Reading installed packages...

S | Name | Summary | Type
---+-------------------------+----------------------------------------+--------
i | crypto-policies | System-wide crypto policies | package
i+ | crypto-policies-scripts | Tool to switch between crypto policies | package

If both "crypto-policies" and "crypto-policies-scripts" are not installed, this is a finding.

Vulnerability Number

V-284950

Documentable

False

Rule Version

SLES-15-010035

Severity Override Guidance

Check Content Reference

Target Key

5274