SUSE Linux Enterprise Server v11 for System z Security Technical Implementation Guide

The SUSE Linux Enterprise Server v11 for System z Security Technical Implementation Guide (V1 R12) has 550 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

550STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V1 · R12

CurrentPublished Fri Oct 26 2018

The system package management tool must not automatically obtain updates.

SUSE Linux Enterprise Server v11 for System z Security Technical Implementation Guide

Assessment Title

Rule Text

The system package management tool must not automatically obtain updates.

Description

Discussion Text

System package management tools can obtain a list of updates and patches from a package repository and make this information available to the SA for review and action. Using a package repository outside of the organization's control presents a risk of malicious packages being introduced.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-22589

Rule

SV-46084r1_rule

Severity

low

Rule Version

GEN008820

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

Check for the existence of a cron job called opensuse.org-online_update
# find /etc/cron* -name opensuse*
If a symlink or executable script is found, this is a finding.

Implementation Procedure

Fix Text

Disable the Automatic Online Update option using YaST.
# /sbin/yast2 online_update_configuration
Uncheck the "Automatic Online Update" selection.
Select "Finish" to exit  
If /etc/<cron directory>/opensuse.org-online_update still exists, remove it manually
rm /etc/<cron directory>/opensuse.org-online_update

STIG check 302 of 550 in the SUSE Linux Enterprise Server v11 for System z STIG checklist

← Previous · V-22588The system package management tool must cryptographically verify the authenticity of software packages during installation.Next · V-22595 →The /etc/security/access.conf file must not have an extended ACL.