All installation files originally downloaded to the Tanium Server must be configured to download to a location other than the Tanium Server directory.
An XCCDF Rule
Description
<VulnDiscussion>Typically, the Tanium Server stores the Package Source Files that it downloads from the Internet and server shares or files uploaded through the Tanium Console in a subdirectory of the server's installation directory called Downloads. To ensure package files are not accessible to non-authorized functions, the files must be re-located to outside of the server's installation directory.</VulnDiscussion><FalsePositives></FalsePositives><FalseNegatives></FalseNegatives><Documentable>false</Documentable><Mitigations></Mitigations><SeverityOverrideGuidance></SeverityOverrideGuidance><PotentialImpacts></PotentialImpacts><ThirdPartyTools></ThirdPartyTools><MitigationControl></MitigationControl><Responsibility></Responsibility><IAControls></IAControls>
- ID
- SV-234088r612749_rule
- Severity
- Medium
- References
- Updated
Remediation - Manual Procedure
Access the Tanium Server interactively.
Log on to the server with an account that has administrative privileges.
Configure a directory elsewhere on the server to relocate the installation package files.