Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-227076 | GEN008800 | SV-227076r505925_rule | Low |
Description |
---|
To prevent the installation of software from unauthorized sources, the system package management tool must use cryptographic algorithms to verify the packages are authentic. |
STIG | Date |
---|---|
Solaris 10 SPARC Security Technical Implementation Guide | 2020-09-04 |
Check Text ( C-29238r485609_chk ) |
---|
Verify package signature validation is not disabled. # grep "authentication=quit" /var/sadm/install/admin/default If no configuration is returned, this is a finding. |
Fix Text (F-29226r485610_fix) |
---|
Edit /var/sadm/install/admin/default and set the authentication setting to quit. |