OpenControls Logo

STIG Viewer

STIGViewer Support

The  Photon operating system YUM repository must cryptographically verify the authenticity of all software packages during installation.

Overview

Finding IDVersionRule IDIA ControlsSeverity
V-256532PHTN-30-000061SV-256532r982212_ruleCCI-001749medium
Description
Installation of any nontrusted software, patches, service packs, device drivers, or operating system components can significantly affect the overall security of the operating system. Cryptographically verifying the authenticity of all software packages during installation ensures the software has not been tampered with and has been provided by a trusted vendor.
STIGDate
VMware vSphere 7.0 vCenter Appliance Photon OS Security Technical Implementation Guide2024-12-16

Related Frameworks

1 mapping across 2 frameworks
NIST 800-530 mappings

No source states a mapping between these directly.

Also reachable in 2 hops (12) derived by us, not asserted by any source

Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.

AC-2(10)Shared and Group Account Credential Change
1.00
AU-4Audit Log Storage Capacity
1.00
CM-14Signed Components
1.00
CM-5(1)Automated Access Enforcement and Audit Records
1.00
CM-5(3)Signed Components
1.00
CM-7Least Functionality
1.00
CM-7(5)Authorized Software — Allow-by-exception
1.00
IA-2(5)Individual Authentication with Group Authentication
1.00
SC-2Separation of System and User Functionality
1.00
SC-23Session Authenticity
1.00

+2 more (top 10 by confidence shown)

CCI1 mapping
CCI-001749
1.00

Details

Check Text (C-256532r982212_chk)

At the command line, run the following command: # grep gpgcheck /etc/yum.repos.d/* If "gpgcheck" is not set to "1" in any returned file, this is a finding.

Fix Text (F-60150r887269_fix)

Open the file where "gpgcheck" is not set to "1" with a text editor. Remove any existing "gpgcheck" setting and add the following line at the end of the file: gpgcheck=1