The system package management tool must be used to verify system software periodically.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-22506	GEN006565	SV-26181r1_rule	ECAT-1	Medium

Description
Verification using the system package management tool can be used to determine that system software has not been tampered with. This requirement is not applicable to systems that do not use package management tools.

STIG	Date
VMware ESX 3 Server	2016-05-13

Details

Check Text ( C-29280r1_chk )
Check the root crontab for a job invoking the system package management tool to verify the integrity of installed packages. If no such job exists, this is a finding.

Fix Text (F-26312r1_fix)
Add a job to the root crontab that invokes the system package management tool to verify the integrity of installed packages.