Install the Haveged Package for Enhanced Entropy

RendahLevel 2Otomatisbind

Deskripsi

Install the haveged package to provide enhanced entropy for generating cryptographic keys. Haveged is a user space entropy daemon which is not dependent upon the standard mechanisms for harvesting randomness for the system entropy pool. Haveged uses HAVEGE (HArdware Volatile Entropy Gathering and Expansion) to maintain a pool of 1 million random bytes used to fill /dev/random. The audit requires a running haveged process (pgrep -x haveged).

Cara pemeriksaan

Metode audit: Perintah shell

shell

command -v pgrep >/dev/null 2>&1 || exit 1
pgrep -x haveged >/dev/null 2>&1 && echo compliant || echo 'haveged is not running'

Output yang diharapkan: compliant

Cara perbaikan

Metode perbaikan: Panduan atau patch infrastruktur

Install the haveged package with the appropriate package manager and configure it to start, as shown below. # yum install haveged # systemctl enable haveged # systemctl start haveged

Properti

Sistem operasi: Apa saja
Tag: binddnsdnssec
Referensi: CIS ISC BIND DNS Server 9.11 Benchmark v1.0.0 - 8.1 Install the Haveged Package for Enhanced Entropy

Periksa host ini

Jalankan ini pada mesin yang diizinkan untuk Anda audit. Pemindaian bersifat hanya baca.

shell

tmaegis scan --target bind --level 2