Detections
Analytics

GEN008820 - The system package management tool must not automatically obtain updates.

Information

System package management tools can obtain a list of updates and patches from a package repository and make this information available to the SA for review and action. Using a package repository outside of the organization's control presents a risk of malicious packages being introduced.

Solution

Disable the yum service.
# chkconfig yum-updatesd off ; service yum-updatesd stop

See Also

http://iasecontent.disa.mil/stigs/zip/U_RedHat_5_V1R18_STIG.zip

Item Details

Category: SYSTEM AND INFORMATION INTEGRITY

References: 800-53|SI-2(2), CAT|III, CCI|CCI-001233, Group-ID|V-22589, Rule-ID|SV-26992r1_rule, STIG-ID|GEN008820, Vuln-ID|V-22589

Plugin: Unix

Control ID: 5c1b2c51aa9186e964ef1214650e721c9af6cd388f3c2d29853f16a7937bd021