Skip to content

Guide to the Secure Configuration of SUSE Linux Enterprise 15

Rules, Groups, and Values defined within the XCCDF Benchmark

  • Install dnf-automatic Package

    The dnf-automatic package can be installed with the following command:
    $ sudo zypper install dnf-automatic
    Rule Medium Severity
  • Ensure zypper Removes Previous Package Versions

    <code>zypper</code> should be configured to remove previous software components after new versions have been installed. To configure <code>zypper</...
    Rule Low Severity
  • Configure dnf-automatic to Install Available Updates Automatically

    To ensure that the packages comprising the available updates will be automatically installed by <code>dnf-automatic</code>, set <code>apply_updates...
    Rule Medium Severity
  • Configure dnf-automatic to Install Only Security Updates

    To configure <code>dnf-automatic</code> to install only security updates automatically, set <code>upgrade_type</code> to <code>security</code> unde...
    Rule Low Severity
  • Ensure GPG keys are configured

    The operation system or installed application can be successfully bootstrapped without the GPG key being trusted. However, you cannot install new ...
    Rule Medium Severity

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules