Enable dnf-automatic Timer

An XCCDF Rule

Description

The dnf-automatic timer can be enabled with the following command:

$ sudo systemctl enable dnf-automatic.timer

Rationale

The dnf-automatic is an alternative command line interface (CLI) to dnf upgrade with specific facilities to make it suitable to be executed automatically and regularly from systemd timers, cron jobs and similar. The tool is controlled by dnf-automatic.timer SystemD timer.

ID: xccdf_org.ssgproject.content_rule_timer_dnf-automatic_enabled
Severity: Medium
References: CM-6(a) SI-2(5) SI-2(c)

FMT_SMF_EXT.1

SRG-OS-000191-GPOS-00080

R61
Updated: about 1 month ago

Remediation Templates

- name: Enable timer dnf-automatic
  block:
  - name: Gather the package facts
    package_facts:
      manager: auto
  - name: Enable timer dnf-automatic
    systemd:
      name: dnf-automatic.timer
      enabled: 'yes'
      state: started
    when:
    - '"dnf-automatic" in ansible_facts.packages'
  tags:
  - NIST-800-53-CM-6(a)
  - NIST-800-53-SI-2(5)
  - NIST-800-53-SI-2(c)
  - enable_strategy
  - low_complexity
  - low_disruption
  - medium_severity
  - no_reboot_needed
  - timer_dnf-automatic_enabled

SYSTEMCTL_EXEC='/usr/bin/systemctl'
"$SYSTEMCTL_EXEC" start 'dnf-automatic.timer'
"$SYSTEMCTL_EXEC" enable 'dnf-automatic.timer'

Enable dnf-automatic Timer

Description

Rationale

Remediation Templates

An Ansible Snippet

A Shell Script