Check: GEN006565 M6
MACOSX 10.6:
GEN006565 M6
(in version v1 r3)
Title
The system package management tool must be used to verify system software periodically. (Cat II impact)
Discussion
Verification using the system package management tool can be used to determine that system software has not been tampered with. This requirement is not applicable to systems not using package management tools.
Check Content
Open a terminal session and enter the following command to verify the permissions are set to the original installation settings. diskutil verifyPermissions /
Fix Text
Open a terminal session and enter the following command to reset the permissions to the original installation settings. diskutil repairPermissions /
Additional Identifiers
Rule ID: SV-38138r1_rule
Vulnerability ID: V-22506
Group Title:
Expert Comments
CCIs
Number | Definition |
---|---|
CCI-000366 |
The organization implements the security configuration settings. |
CCI-000698 |
The organization requires the developer of the information system, system component, or information system service to enable integrity verification of software and firmware components. |