SUSE Linux Enterprise Micro (SLEM) 5 Security Technical Implementation Guide

The SUSE Linux Enterprise Micro (SLEM) 5 Security Technical Implementation Guide (V1 R5) has 210 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

210STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V1 · R5

CurrentPublished Wed Sep 30 2026

FIPS 140-2/140-3 mode must be enabled on SLEM 5.

SUSE Linux Enterprise Micro (SLEM) 5 Security Technical Implementation Guide

Assessment Title

Rule Text

FIPS 140-2/140-3 mode must be enabled on SLEM 5.

Description

Discussion Text

Use of weak or untested encryption algorithms undermines the purposes of using encryption to protect data. SLEM 5 must implement cryptographic modules adhering to the higher standards approved by the federal government since this provides assurance they have been tested and validated.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-261473

Rule

SV-261473r996824_rule

Severity

high

Rule Version

SLEM-05-671010

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

Verify SLEM 5 is running in FIPS mode by running the following command.

     > cat /proc/sys/crypto/fips_enabled 
     1

If the value returned is "0", nothing is returned, or the file does not exist, this is a finding.

Implementation Procedure

Fix Text

To configure SLEM 5 to run in FIPS mode, add "fips=1" to the kernel parameter during SLEM 5 install.

Enabling FIPS mode on a preexisting system involves a number of modifications to SLEM 5. Refer to section 9.1, "Crypto Officer Guidance", of the following document for installation guidance:

http://csrc.nist.gov/groups/STM/cmvp/documents/140-1/140sp/140sp2435.pdf

STIG check 208 of 210 in the SUSE Linux Enterprise Micro (SLEM) 5 STIG checklist

← Previous · V-261472SLEM 5 must not disable syscall auditing.Next · V-288839 →SLEM 5 must generate audit records for all uses of the "useradd" command.