hardening-script-el6
hardening-script-el6 copied to clipboard
Aide still uses md5 which is prevented by FIPS
There is a lot of code to remove non FIPS compliant hashing algorithms from aide.conf in aide_hash_algorithims.sh however it ignores the default rule R which uses md5: #R: p+ftupe+i+l+n+u+g+s+m+c+md5
. A new custom rule should instead by made without md5 and then all instances of R need to be replaced with this custom rule. I'm not sure what order the scripts are run in but aide_verify_ACLs.sh and aide_verify_xattrs.sh may also need to be updated as both of those files are specifically looking for tests that use rule R and would instead need to be looking for the new custom rule.