Detections
Analytics

1.37 SOL-11.1-020050

Information

The operating system must protect audit tools from unauthorized deletion.

GROUP ID: V-216284
RULE ID: SV-216284r958614

Failure to maintain system configurations may result in privilege escalation.

Solution

The Software Installation Profile is required.

Configure the package system to ensure that digital signatures are verified.

# pfexec pkg set-property signature-policy verify

Check that package permissions are configured per vendor requirements.

# pfexec pkg verify

If any errors are reported unrelated to STIG changes, use:

# pfexec pkg fix

to bring configuration settings and permissions into factory compliance.

See Also

https://workbench.cisecurity.org/benchmarks/23765

Item Details

Category: AUDIT AND ACCOUNTABILITY

References: 800-53|AU-9, CAT|II, CCI|CCI-001495, Rule-ID|SV-216284r958614_rule, STIG-ID|SOL-11.1-020050, Vuln-ID|V-216284

Plugin: Unix

Control ID: d32cca2af1da1e40ead1900b1902b1a3c11dfdbe96d4fc2e5b5af30f01511473