Detections
Analytics

1.49 SOL-11.1-020190

Information

The operating system must employ automated mechanisms, per organization-defined frequency, to detect the addition of unauthorized components/devices into the operating system.

GROUP ID: V-219970
RULE ID: SV-219970r958794

Addition of unauthorized code or packages may result in data corruption or theft.

NOTE: Nessus has provided the target output to assist in reviewing the benchmark to ensure target compliance.

Solution

The Software Installation Profile is required.

Review and report any unauthorized package installation operations.

If necessary, remove unauthorized packages.

# pfexec pkg uninstall [package name]

See Also

https://workbench.cisecurity.org/benchmarks/23765

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-3(5), CAT|II, CCI|CCI-001744, Rule-ID|SV-219970r958794_rule, STIG-ID|SOL-11.1-020190, Vuln-ID|V-219970

Plugin: Unix

Control ID: 161bb222cb315bb98ce4f8bf8c7dc95268d4a8d56f43b9893f18caeb09fa0ac1