System packages must be configured with the vendor-provided files, permissions, and ownerships.
An XCCDF Rule
Description
Failure to maintain system configurations may result in privilege escalation.
- ID
- SV-216285r958634_rule
- Version
- SOL-11.1-020080
- Severity
- Medium
- References
- Updated
Remediation Templates
A Manual Procedure
The Software Installation Profile is required.
Configure the package system to ensure that digital signatures are verified.
# pfexec pkg set-property signature-policy verify