Navigate

Check: RHEL-09-215080

RHEL 9 STIG: RHEL-09-215080 (in versions v1 r3 through v1 r1)

Title

RHEL 9 must have the gnutls-utils package installed. (Cat II impact)

Discussion

GnuTLS is a secure communications library implementing the SSL, TLS and DTLS protocols and technologies around them. It provides a simple C language application programming interface (API) to access the secure communications protocols as well as APIs to parse and write X.509, PKCS #12, OpenPGP and other required structures. This package contains command line TLS client and server and certificate manipulation tools.

Check Content

Verify that RHEL 9 has the gnutls-utils package installed with the following command: $ dnf list --installed gnutls-utils Example output: gnutls-utils.x86_64 3.7.3-9.el9 If the "gnutls-utils" package is not installed, this is a finding.

Fix Text

The gnutls-utils package can be installed with the following command: $ sudo dnf install gnutls-utils

Additional Identifiers

Rule ID: SV-257839r925504_rule

Vulnerability ID: V-257839

Group Title: SRG-OS-000480-GPOS-00227

Expert Comments

Expert comments are only available to logged-in users.

CCIs

CCIs tied to check.

Number	Definition
CCI-000366	The organization implements the security configuration settings.

Controls

Controls tied to check. These are derived from the CCIs shown above.

Number	Title
CM-6	Configuration Settings