← Rules Catalog
mediumservicesverified rollback-safe

Ensure fapolicyd service is enabled

fapolicyd-enabled · RHEL ≥ 8 · 1 impl

Description

The fapolicyd service must be enabled to enforce application whitelisting policies.

Rationale

Without fapolicyd running, application execution policies are not enforced, allowing unauthorized software to run.

Check → Remediate

Checkservice_state
name:
fapolicyd
enabled:
true
active:
true
Remediateservice_enabled
name:
fapolicyd

Framework references

STIG

V-258090V-244545V-280970 / RHEL-10-200601

NIST 800-53

CM-7CM-11

Live verification

rhel10:checkrhel8:checkrhel9:check
#service#security#application-whitelisting