The system package management tool must cryptographically verify the authenticity of software packages during installation.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-22588	GEN008800	SV-26263r1_rule	ECSC-1	Low

Description
To prevent the installation of software from unauthorized sources, the system package management tool must use cryptographic algorithms to verify the packages are authentic.

STIG	Date
VMware ESX 3 Server	2016-05-13

Details

Check Text ( C-29323r1_chk )
Determine if the system package management tool cryptographically verifies the authenticity of packages during installation. If it does not, this is a finding.

Fix Text (F-26355r1_fix)
If possible, configure the system package management tool to cryptographically verify the authenticity of packages during installation.