The system package management tool must cryptographically verify the authenticity of software packages during installation.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-227986	GEN008800	SV-227986r854523_rule		Low

Description
To prevent the installation of software from unauthorized sources, the system package management tool must use cryptographic algorithms to verify the packages are authentic.

STIG	Date
Solaris 10 X86 Security Technical Implementation Guide	2022-09-07

Details

Check Text ( C-30148r490417_chk )
Verify package signature validation is not disabled. # grep "authentication=quit" /var/sadm/install/admin/default If no configuration is returned, this is a finding.

Fix Text (F-30136r490418_fix)
Edit /var/sadm/install/admin/default and set the authentication setting to quit.