cyberstrikeus 1.2.1.2 Ensure package manager repositories are configured (Manual)
Profile
- Level 1 - Server
- Level 1 - Workstation
Description
Systems need to have package manager repositories configured to ensure they receive the latest patches and updates.
Rationale
If a system's package repositories are misconfigured important patches may not be identified or a rogue repository could introduce compromised software.
Audit Procedure
Command Line
Run the following command and verify package repositories are configured correctly:
# apt-cache policy
Expected Result
Package repositories should be configured according to site policy.
Remediation
Command Line
Configure your package manager repositories according to site policy.
References
- NIST SP 800-53 Rev. 5: SI-2
CIS Controls
| Controls Version | Control | IG 1 | IG 2 | IG 3 |
|---|---|---|---|---|
| v8 | 7.3 Perform Automated Operating System Patch Management | * | * | * |
| v8 | 7.4 Perform Automated Application Patch Management | * | * | * |
| v7 | 3.4 Deploy Automated Operating System Patch Management Tools | * | * | * |
| v7 | 3.5 Deploy Automated Software Patch Management Tools | * | * | * |
MITRE ATT&CK Mappings: T1195, T1195.001 | TA0005 | M1051