← Back to Red Hat Enterprise Linux 10 Security Technical Implementation Guide

V-281006

CAT II (Medium)

RHEL 10 must have the "gnutls-utils" package installed.

Rule ID

SV-281006r1195397_rule

STIG

Red Hat Enterprise Linux 10 Security Technical Implementation Guide

Version

V1R1

CCIs

CCI-000381

Discussion

"GnuTLS" is a secure communications library implementing the Secure Sockets Layer (SSL), Transport Layer Security (TLS), and Datagram TLS (DTLS) protocols and technologies around them. It provides a simple C language application programming interface (API) to access the secure communications protocols as well as APIs to parse and write X.509, PKCS #12, OpenPGP, and other required structures. This package contains command line TLS client and server and certificate manipulation tools.

Check Content

Verify RHEL 10 has the "gnutls-utils" package installed with the following command:

$ sudo dnf list --installed gnutls-utils
Installed Packages
gnutls-utils.x86_64                         3.8.9-9.el10_0.14                         @rhel-10-for-x86_64-appstream-rpms

If the "gnutls-utils" package is not installed, this is a finding.

Fix Text

Configure RHEL 10 to have the "gnutls-utils" package installed with the following command:

$ sudo dnf -y install gnutls-utils