hardening-script-el6 icon indicating copy to clipboard operation
hardening-script-el6 copied to clipboard

Aide still uses md5 which is prevented by FIPS

Open thomric2 opened this issue 8 years ago • 0 comments

There is a lot of code to remove non FIPS compliant hashing algorithms from aide.conf in aide_hash_algorithims.sh however it ignores the default rule R which uses md5: #R: p+ftupe+i+l+n+u+g+s+m+c+md5. A new custom rule should instead by made without md5 and then all instances of R need to be replaced with this custom rule. I'm not sure what order the scripts are run in but aide_verify_ACLs.sh and aide_verify_xattrs.sh may also need to be updated as both of those files are specifically looking for tests that use rule R and would instead need to be looking for the new custom rule.

thomric2 avatar Jul 22 '16 00:07 thomric2