TOSS 5 must enable the hardware random number generator entropy gatherer service.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
| V-282626 | TOSS-05-000088 | SV-282626r1200858_rule | CCI-000366 | low |
| Description | ||||
| The most important characteristic of a random number generator is its randomness, namely its ability to deliver random numbers that are impossible to predict. Entropy in computer security is associated with the unpredictability of a source of randomness. The random source with high entropy tends to achieve a uniform distribution of random values. Random number generators are one of the most important building blocks of cryptosystems. The "rngd" service feeds random data from hardware device to kernel random device. Quality (nonpredictable) random number generation is important for several security functions (i.e., ciphers). | ||||
| STIG | Date | |||
| Tri-Lab Operating System Stack (TOSS) 5 Security Technical Implementation Guide | 2026-04-01 | |||
Details
Check Text (C-282626r1200858_chk)
Verify TOSS 5 enabled the hardware random number generator entropy gatherer service using the following command:
Note: For TOSS 5 systems running with kernel FIPS mode enabled as specified by TOSS-05-000470, this requirement is not applicable.
$ systemctl is-active rngd
active
If the "rngd" service is not active, this is a finding.
Fix Text (F-87092r1200857_fix)
Install the "rng-tools" package using the following command:
$ sudo dnf install rng-tools
Enable the "rngd" service using the following command:
$ sudo systemctl enable --now rngd