SRG-OS-000120-GPOS-00061 Controls

STIG IDVersionTitleProduct
ALMA-09-039290V1R2AlmaLinux OS 9 must use mechanisms meeting the requirements of applicable federal laws, executive orders, directives, policies, regulations, standards, and guidance for authentication to a cryptographic module.
ALMA-09-039510V1R2The libreswan package must be installed.
ALMA-09-039620V1R2AlmaLinux OS 9 must have the packages required for encrypting offloaded audit logs installed.
OL08-00-010159V2R4The OL 8 "pam_unix.so" module must be configured in the system-auth file to use a FIPS 140-2 approved cryptographic hashing algorithm for system authentication.
OL08-00-010160V2R4The OL 8 "pam_unix.so" module must be configured in the password-auth file to use a FIPS 140-2 approved cryptographic hashing algorithm for system authentication.
OL08-00-010161V2R4OL 8 must prevent system daemons from using Kerberos for authentication.
OL08-00-010162V2R4The krb5-workstation package must not be installed on OL 8.
OL08-00-010163V2R4The krb5-server package must not be installed on OL 8.
OL09-00-000355V1R1OL 9 must have the packages required for encrypting offloaded audit logs installed.
OL09-00-000410V1R1OL 9 must have the libreswan package installed.
OL09-00-002424V1R1OL 9 must use mechanisms meeting the requirements of applicable federal laws, executive orders, directives, policies, regulations, standards, and guidance for authentication to a cryptographic module.
OL09-00-002429V1R1OL 9 must prevent system daemons from using Kerberos for authentication.
RHEL-08-010160V2R3The RHEL 8 pam_unix.so module must be configured in the password-auth file to use a FIPS 140-2 approved cryptographic hashing algorithm for system authentication.
RHEL-08-010161V2R3RHEL 8 must prevent system daemons from using Kerberos for authentication.
RHEL-08-010162V2R3The krb5-workstation package must not be installed on RHEL 8.
RHEL-08-010163V2R3The krb5-server package must not be installed on RHEL 8.
RHEL-08-010159V2R3The RHEL 8 pam_unix.so module must be configured in the system-auth file to use a FIPS 140-2 approved cryptographic hashing algorithm for system authentication.
RHEL-09-672025V2R4RHEL 9 must use mechanisms meeting the requirements of applicable federal laws, executive orders, directives, policies, regulations, standards, and guidance for authentication to a cryptographic module.
SLES-12-010210V3R2The SUSE operating system must employ FIPS 140-2 approved cryptographic hashing algorithm for system authentication (login.defs).
SLES-15-010260V2R4The SUSE operating system must employ FIPS 140-2 approved cryptographic hashing algorithm for system authentication (login.defs).
UBTU-18-010110V2R15The Ubuntu operating system must employ a FIPS 140-2 approved cryptographic hashing algorithms for all created and stored passwords.
UBTU-20-010404V2R1The Ubuntu operating system must encrypt all stored passwords with a FIPS 140-2 approved cryptographic hashing algorithm.
UBTU-22-611070V2R4Ubuntu 22.04 LTS must encrypt all stored passwords with a FIPS 140-3-approved cryptographic hashing algorithm.
UBTU-24-400400V1R1Ubuntu 24.04 LTS must encrypt all stored passwords with a FIPS 140-3 approved cryptographic hashing algorithm.
WN10-CC-000052V3R4Windows 10 must be configured to prioritize ECC Curves with longer key lengths first.
WN10-SO-000190V3R4Kerberos encryption types must be configured to prevent the use of DES and RC4 encryption suites.
WN11-CC-000052V2R3Windows 11 must be configured to prioritize ECC Curves with longer key lengths first.
WN11-SO-000190V2R3Kerberos encryption types must be configured to prevent the use of DES and RC4 encryption suites.
WN16-SO-000350V2R9Kerberos encryption types must be configured to prevent the use of DES and RC4 encryption suites.
WN19-SO-000290V3R4Windows Server 2019 Kerberos encryption types must be configured to prevent the use of DES and RC4 encryption suites.
WN22-SO-000290V2R4Windows Server 2022 Kerberos encryption types must be configured to prevent the use of DES and RC4 encryption suites.