UCF STIG Viewer Logo
Changes are coming to https://stigviewer.com. Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey

The system package management tool must not automatically obtain updates.


Overview

Finding ID Version Rule ID IA Controls Severity
V-22589 GEN008820 SV-46084r1_rule Low
Description
System package management tools can obtain a list of updates and patches from a package repository and make this information available to the SA for review and action. Using a package repository outside of the organization's control presents a risk of malicious packages being introduced.
STIG Date
SUSE Linux Enterprise Server v11 for System z 2016-12-20

Details

Check Text ( C-43341r1_chk )
Check for the existence of a cron job called opensuse.org-online_update
# find /etc/cron* -name opensuse*
If a symlink or executable script is found, this is a finding.
Fix Text (F-39429r1_fix)
Disable the Automatic Online Update option using YaST.
# /sbin/yast2 online_update_configuration
Uncheck the “Automatic Online Update” selection.
Select “Finish” to exit
If /etc//opensuse.org-online_update still exists, remove it manually
rm /etc//opensuse.org-online_update