All installation files originally downloaded to the Tanium Server must be configured to download to a location other than the Tanium Server directory.
An XCCDF Rule
Description
<VulnDiscussion>Typically, the Tanium Server stores the Package Source Files that it downloads from the internet and server shares or files uploaded through the Tanium Console in a subdirectory of the server's installation directory called "Downloads". To ensure package files are not accessible to nonauthorized functions, the files must be relocated to outside of the server's installation directory.</VulnDiscussion><FalsePositives></FalsePositives><FalseNegatives></FalseNegatives><Documentable>false</Documentable><Mitigations></Mitigations><SeverityOverrideGuidance></SeverityOverrideGuidance><PotentialImpacts></PotentialImpacts><ThirdPartyTools></ThirdPartyTools><MitigationControl></MitigationControl><Responsibility></Responsibility><IAControls></IAControls>
- ID
- SV-253847r842569_rule
- Severity
- Medium
- References
- Updated
Remediation - Manual Procedure
1. Access the Tanium Server.
2. Log on to the server with an account that has administrative privileges.
3. Create a new folder outside of the Tanium Server directory (e.g., E:\Stage\Downloads).