documentation_complete: true


title: 'Install fapolicyd Package'

description: |-
    {{{ describe_package_install(package="fapolicyd") }}}

rationale: |-
    <tt>fapolicyd</tt> (File Access Policy Daemon)
    implements application whitelisting to decide file access rights.

severity: medium

identifiers:
    cce@rhcos4: CCE-82533-1
    cce@rhel8: CCE-82191-8
    cce@rhel9: CCE-84224-5
    cce@rhel10: CCE-89813-0

references:
    nist: CM-6(a),SI-4(22)
    ospp: FMT_SMF_EXT.1
    srg: SRG-OS-000370-GPOS-00155,SRG-OS-000368-GPOS-00154,SRG-OS-000480-GPOS-00230
    stigid@ol8: OL08-00-040135

ocil_clause: 'the fapolicyd package is not installed'

ocil: '{{{ ocil_package(package="fapolicyd") }}}'

fixtext: |-
    {{{ fixtext_package_installed("fapolicyd") | indent(4) }}}

srg_requirement: '{{{ srg_requirement_package_installed("fapolicyd") }}}'

template:
    name: package_installed
    vars:
        pkgname: fapolicyd
