The system package management tool must not automatically obtain updates.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-22589 | GEN008820 | SV-38405r1_rule | ECSC-1 | Low |
| Description |
|---|
| System package management tools can obtain a list of updates and patches from a package repository and make this information available to the SA for review and action. Using a package repository outside of the organization's control presents a risk that malicious packages could be introduced. |
| STIG | Date |
|---|---|
| HP-UX 11.31 Security Technical Implementation Guide | 2017-01-27 |
Details
| Check Text ( None ) |
|---|
| None |
| Fix Text (F-32179r1_fix) |
|---|
| Configure the system package management tool to not automatically obtain updates. |