RHEL-06-000015 - The system package management tool must cryptographically verify the authenticity of all software packages during installation.

Information

Ensuring all packages' cryptographic signatures are valid prior to installation ensures the provenance of the software and protects against malicious tampering.

Solution

To ensure signature checking is not disabled for any repos, remove any lines from files in '/etc/yum.repos.d' of the form:

gpgcheck=0

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_RHEL_6_V2R2_STIG.zip

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-5(3), CAT|III, CCI|CCI-001749, Rule-ID|SV-217856r603264_rule, STIG-ID|RHEL-06-000015, STIG-Legacy|SV-50288, STIG-Legacy|V-38487, Vuln-ID|V-217856

Plugin: Unix

Control ID: 3732f9523dd2804c5970935942376a9e7017b43469c7781b9520302b8d822c90