The system package management tool must cryptographically verify the authenticity of software packages during installation.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-22588 | GEN008800 | SV-26991r1_rule | ECSC-1 | Low |
| Description |
|---|
| To prevent the installation of software from unauthorized sources, the system package management tool must use cryptographic algorithms to verify the packages are authentic. |
| STIG | Date |
|---|---|
| Solaris 10 X86 Security Technical Implementation Guide | 2014-06-27 |
Details
| Check Text ( None ) |
|---|
| None |
| Fix Text (F-24257r1_fix) |
|---|
| Edit /var/sadm/install/admin/default and set the authentication setting to quit. |