TOSS must be a vendor-supported release.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-253110	TOSS-04-040690	SV-253110r825002_rule		High

Description
An operating system release is considered "supported" if the vendor continues to provide security patches for the product. With an unsupported release, it will not be possible to resolve security issues discovered in the system software.

STIG	Date
Tri-Lab Operating System Stack (TOSS) 4 Security Technical Implementation Guide	2022-08-29

Details

Check Text ( C-56563r825000_chk )
Verify the version of the operating system is vendor supported. Check the version of the operating system with the following command: $ sudo cat /etc/toss-release toss-release-4.3-3 Current End of support for TOSS 4.3 is 30 April 2022. Current End of support for TOSS 4.4 is 30 November 2023. Current End of support for TOSS 4.5 is 30 April 2023. Current End of support for TOSS 4.6 is 30 November 2023. Current End of support for TOSS 4.7 is 30 April 2024. Current End of support for TOSS 4.8 is 31 May 2029. If the release is not supported by the vendor, this is a finding.

Check Text ( C-56563r825000_chk )

Verify the version of the operating system is vendor supported.

Check the version of the operating system with the following command:

$ sudo cat /etc/toss-release
toss-release-4.3-3

Current End of support for TOSS 4.3 is 30 April 2022.

Current End of support for TOSS 4.4 is 30 November 2023.

Current End of support for TOSS 4.5 is 30 April 2023.

Current End of support for TOSS 4.6 is 30 November 2023.

Current End of support for TOSS 4.7 is 30 April 2024.

Current End of support for TOSS 4.8 is 31 May 2029.

If the release is not supported by the vendor, this is a finding.

Fix Text (F-56513r825001_fix)
Upgrade to a supported version of TOSS.