Title

The Ubuntu operating system must deploy Endpoint Security for Linux Threat Prevention (ENSLTP). (Cat II impact)

Discussion

Without the use of automated mechanisms to scan for security flaws on a continuous and/or periodic basis, the operating system or other system components may remain vulnerable to the exploits presented by undetected software flaws. To support this requirement, the Ubuntu operating system may have an integrated solution incorporating continuous scanning using HBSS and periodic scanning using other tools, as specified in the requirement.

Check Content

Check that the "mcafeetp" package has been installed: # dpkg -l | grep -i mcafeetp If the "mcafeetp" package is not installed, this is a finding. Check that the daemon is running: # /opt/McAfee/ens/tp/init/mfetpd-control.sh status If the daemon is not running, this is a finding.

Fix Text

Configure the Ubuntu operating system to use ENSLTP. Install the mcafeetp package via the ePO server.

Additional Identifiers

Rule ID: SV-219159r939261_rule

Vulnerability ID: V-219159

Group Title: SRG-OS-000191-GPOS-00080

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.