The system must verify that package updates are digitally signed.
An XCCDF Rule
Description
Digitally signed packages ensure that the source of the package can be identified.
- ID
- SV-219997r1016296_rule
- Version
- SOL-11.1-020020
- Severity
- Medium
- References
- Updated
Remediation Templates
A Manual Procedure
The Software Installation Profile is required.
Configure the package system to ensure that digital signatures are verified.
# pfexec pkg set-property signature-policy verify