RHEL 9 must have the pcsc-lite package installed.

Overview

Finding IDVersionRule IDIA ControlsSeverity
V-258124RHEL-09-611175SV-258124r1045250_ruleCCI-004046medium
Description
The pcsc-lite package must be installed if it is to be available for multifactor authentication using smart cards.
STIGDate
Red Hat Enterprise Linux 9 Security Technical Implementation Guide2025-05-14

Related Frameworks

2 paths across 2 frameworks
NIST 800-531 mapping
  • DISA · 2 · disa_xccdf · related
  • DISA · 2025-01-23 · disa_cci_list · equivalent
CCI1 mapping
CCI-004046
1.00
  • DISA · 2 · disa_xccdf · related

Details

Check Text (C-258124r1045250_chk)

Note: If the system administrator (SA) demonstrates the use of an approved alternate multifactor authentication method, this requirement is Not Applicable. Verify that RHEL 9 has the pcsc-lite package installed with the following command: $ dnf list --installed pcsc-lite Example output: pcsc-lite.x86_64 1.9.4-1.el9 If the "pcsc-lite" package is not installed, this is a finding.

Fix Text (F-61789r926358_fix)

The pcsc-lite package can be installed with the following command: $ sudo dnf install pcsc-lite