UCF STIG Viewer Logo

The system package management tool must cryptographically verify the authenticity of software packages during installation.


Overview

Finding ID Version Rule ID IA Controls Severity
V-22588 GEN008800 SV-26263r1_rule ECSC-1 Low
Description
To prevent the installation of software from unauthorized sources, the system package management tool must use cryptographic algorithms to verify the packages are authentic.
STIG Date
Draft AIX Security Technical Implementation Guide 2011-08-17

Details

Check Text ( C-29323r1_chk )
Determine if the system package management tool cryptographically verifies the authenticity of packages during installation. If it does not, this is a finding.
Fix Text (F-26355r1_fix)
If possible, configure the system package management tool to cryptographically verify the authenticity of packages during installation.