From b407b122d2be6c26ae25d1f4cc05ec263704f17a Mon Sep 17 00:00:00 2001 From: Matthew Burket Date: Wed, 4 Dec 2024 13:52:56 -0600 Subject: [PATCH] Move to is_fips_mode_enabled for RHEL 10 --- controls/ism_o.yml | 2 +- controls/srg_gpos/SRG-OS-000396-GPOS-00176.yml | 2 +- controls/srg_gpos/SRG-OS-000478-GPOS-00223.yml | 4 +--- 3 files changed, 3 insertions(+), 5 deletions(-) diff --git a/controls/ism_o.yml b/controls/ism_o.yml index d7ff460aade9..dacd9f99ad85 100644 --- a/controls/ism_o.yml +++ b/controls/ism_o.yml @@ -430,7 +430,7 @@ use of device access control software or by disabling external communication int rules: - configure_crypto_policy - enable_dracut_fips_module - - enable_fips_mode + - is_fips_mode_enabled - var_system_crypto_policy=fips status: automated diff --git a/controls/srg_gpos/SRG-OS-000396-GPOS-00176.yml b/controls/srg_gpos/SRG-OS-000396-GPOS-00176.yml index 0d5f623ef0fb..922347756e7f 100644 --- a/controls/srg_gpos/SRG-OS-000396-GPOS-00176.yml +++ b/controls/srg_gpos/SRG-OS-000396-GPOS-00176.yml @@ -8,6 +8,6 @@ controls: rules: - configure_crypto_policy - package_crypto-policies_installed - - enable_fips_mode + - is_fips_mode_enabled - sysctl_crypto_fips_enabled status: automated diff --git a/controls/srg_gpos/SRG-OS-000478-GPOS-00223.yml b/controls/srg_gpos/SRG-OS-000478-GPOS-00223.yml index 90ffb78b68e3..5b613b85a762 100644 --- a/controls/srg_gpos/SRG-OS-000478-GPOS-00223.yml +++ b/controls/srg_gpos/SRG-OS-000478-GPOS-00223.yml @@ -8,9 +8,7 @@ controls: protection in accordance with applicable federal laws, Executive Orders, directives, policies, regulations, and standards.' rules: - - enable_dracut_fips_module - - enable_fips_mode - - sysctl_crypto_fips_enabled + - is_fips_mode_enabled - aide_use_fips_hashes - configure_kerberos_crypto_policy status: automated