UCF STIG Viewer Logo
Changes are coming to https://stigviewer.com. Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey

RHEL 8 must enable the hardware random number generator entropy gatherer service.


Overview

Finding ID Version Rule ID IA Controls Severity
V-230285 RHEL-08-010471 SV-230285r627750_rule Low
Description
The most important characteristic of a random number generator is its randomness, namely its ability to deliver random numbers that are impossible to predict. Entropy in computer security is associated with the unpredictability of a source of randomness. The random source with high entropy tends to achieve a uniform distribution of random values. Random number generators are one of the most important building blocks of cryptosystems. The rngd service feeds random data from hardware device to kernel random device. Quality (non-predictable) random number generation is important for several security functions (i.e., ciphers).
STIG Date
Red Hat Enterprise Linux 8 Security Technical Implementation Guide 2023-03-08

Details

Check Text ( C-32954r567601_chk )
Check that RHEL 8 has enabled the hardware random number generator entropy gatherer service.

Verify the rngd service is enabled and active with the following commands:

$ sudo systemctl is-enabled rngd

enabled

$ sudo systemctl is-active rngd

active

If the service is not "enable and "active", this is a finding.
Fix Text (F-32929r567602_fix)
Start the rngd service, and enable the rngd service with the following commands:

$ sudo systemctl start rngd.service

$ sudo systemctl enable rngd.service