ComplianceAsCode / ComplianceAsCode/content

Why is configure_crypto_policy checking for existence of /etc/crypto-policies/back-ends/nss.config?

Open
#13,728 1 comment 0 reactions 0 assignees View on GitHub
triaged
Dominant language
Shell
Stars
2.8k
Forks
828
Avg merge
3d 8m
Merged PRs (30d)
80

Description

#### Description of problem:

The `configure_crypto_policy` rule checks for the [existence](https://github.com/ComplianceAsCode/content/blob/cbfa007df7f249a2823f11c0a701d030d8502995/linux_os/guide/system/software/integrity/crypto/configure_crypto_policy/oval/shared.xml#L89) of the `/etc/crypto-policies/back-ends/nss.config` file, without reading its content nor verifying if it's a symlink.

#### SCAP Security Guide Version:

[v0.1.77](https://github.com/ComplianceAsCode/content/releases/tag/v0.1.77)

#### Operating System Version:

Red Hat Enterprise Linux 9

#### Question

What is the rationale behind the check of the existence of the `/etc/crypto-policies/back-ends/nss.config` file?

I've not been able to find the answer in the CIS Red Hat Enterprise Linux Benchmark documentation.

Thanks.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.