The system package management tool must be used to verify system software periodically.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-22506	GEN006565	SV-45914r1_rule	ECAT-1	Medium

Description
Verification using the system package management tool can be used to determine that system software has not been tampered with. This requirement is not applicable to systems not using package management tools.

STIG	Date
SUSE Linux Enterprise Server v11 for System z	2013-04-18

Details

Check Text ( C-43223r1_chk )
Check the root crontab (crontab -l) and the global crontabs in "/etc/crontab", "/etc/cron.d/*" for the presence of an rpm verification command such as: rpm -qVa | awk '$2!="c" {print $0}' If no such cron job is found, this is a finding. If the result of the cron job indicates packages which do not pass verification exist, this is a finding.

Fix Text (F-39293r1_fix)
Add a cron job to run an rpm verification command such as: rpm -qVa | awk '$2!="c" {print $0}' For packages which failed verification: If the package is not necessary for operations, remove it from the system. If the package is necessary for operations, re-install the package.