Changes are coming to https://stigviewer.com.
Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey
The system package management tool must be used to verify system software periodically.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-22506 | GEN006565 | SV-26857r1_rule | ECAT-1 | Medium |
| Description |
|---|
| Verification using the system package management tool can be used to determine that system software has not been tampered with. This requirement is not applicable to systems not using package management tools. |
| STIG | Date |
|---|---|
| SOLARIS 10 X86 SECURITY TECHNICAL IMPLEMENTATION GUIDE | 2018-04-10 |
Details
| Check Text ( C-27828r1_chk ) |
|---|
| Check the root crontab (crontab -l) for the presence of a package check command, such as, pkgchk -n. If no such cron job is found, this is a finding. |
| Fix Text (F-24100r1_fix) |
|---|
| Add a cron job to run a package verification command, such as, pkgchk -n. |