UCF STIG Viewer Logo

The system package management tool must be used to verify system software periodically.


Overview

Finding ID Version Rule ID IA Controls Severity
V-220063 GEN006565 SV-220063r603265_rule Medium
Description
Verification using the system package management tool can be used to determine that system software has not been tampered with. This requirement is not applicable to systems not using package management tools.
STIG Date
Solaris 10 SPARC Security Technical Implementation Guide 2022-09-07

Details

Check Text ( C-21772r485495_chk )
Check the root crontab (crontab -l) for the presence of a package check command, such as, pkgchk -n.

If no such cron job is found, this is a finding.
Fix Text (F-21771r485496_fix)
Add a cron job to run a package verification command, such as, pkgchk -n.