Canonical Ubuntu 16.04 LTS Security Technical Implementation Guide

The Canonical Ubuntu 16.04 LTS Security Technical Implementation Guide (V2 R3) has 229 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

229STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V2 · R3

CurrentPublished Fri Apr 23 2021

The Ubuntu operating system must be a vendor supported release.

Canonical Ubuntu 16.04 LTS Security Technical Implementation Guide

Assessment Title

Rule Text

The Ubuntu operating system must be a vendor supported release.

Description

Discussion Text

An Ubuntu operating system release is considered "supported" if the vendor continues to provide security patches for the product. With an unsupported release, it will not be possible to resolve security issues discovered in the system software.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-214939

Rule

SV-214939r648696_rule

Severity

high

Rule Version

UBTU-16-010000

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

Verify the version of the Ubuntu operating system is vendor supported.

Check the version of the Ubuntu operating system with the following command:

# cat /etc/lsb-release

DISTRIB_RELEASE=16.04
DISTRIB_CODENAME=xenial
DISTRIB_DESCRIPTION="Ubuntu 16.04.1 LTS"

Validate that "Extended Security Maintenance" support has been purchased from the vendor.
If the operating system does not have a documented "Extended Security Maintenance" agreement in place, this is a finding.

Implementation Procedure

Fix Text

Upgrade to a supported version of the Ubuntu operating system.

STIG check 1 of 229 in the Canonical Ubuntu 16.04 LTS STIG checklist

Next · V-214940 →Ubuntu vendor packaged system security patches and updates must be installed and up to date.