← Rules Catalog
lowservicesverified rollback-safe

Ensure rngd service is enabled

rngd-enabled · RHEL ≥ 8 · 1 impl

Description

The rngd service must be enabled to gather entropy from hardware random number generators.

Rationale

The hardware random number generator entropy gatherer daemon feeds data from hardware RNG devices into the kernel entropy pool, improving the quality of random numbers used for cryptographic operations.

Check → Remediate

Checkservice_state
name:
rngd
enabled:
true
active:
true
Remediateservice_enabled
name:
rngd

Framework references

STIG

V-257782V-230285

NIST 800-53

SC-13

Live verification

rhel8:checkrhel9:check
#service#crypto#rng#entropy