← Rules Catalog
mediumservicesverified rollback-safe

Ensure fapolicyd package is installed

pkg-fapolicyd-present · RHEL ≥ 8 · 2 impls

Description

The fapolicyd package must be installed to provide application whitelisting capabilities.

Rationale

Fapolicyd (File Access Policy Daemon) controls execution of applications based on a user-defined policy, preventing unauthorized software from running on the system.

Check → Remediate

Checkpackage_state
name:
fapolicyd
state:
present
Remediatepackage_present
name:
fapolicyd

Framework references

STIG

V-280969 / RHEL-10-200600V-258089V-230523

NIST 800-53

CM-7CM-11

Live verification

rhel8:checkrhel9:check
#package#security#application-whitelisting