mediumservicesverified ✓rollback-safe
Ensure fapolicyd service is enabled
fapolicyd-enabled · RHEL ≥ 8 · 1 impl
Description
The fapolicyd service must be enabled to enforce application whitelisting policies.
Rationale
Without fapolicyd running, application execution policies are not enforced, allowing unauthorized software to run.
Check → Remediate
Checkservice_state
- name:
- fapolicyd
- enabled:
- true
- active:
- true
Remediateservice_enabled
- name:
- fapolicyd
Framework references
STIG
V-258090V-244545V-280970 / RHEL-10-200601
NIST 800-53
CM-7CM-11
Live verification
rhel10:checkrhel8:checkrhel9:check
#service#security#application-whitelisting