Title

The SUSE operating system must implement the Endpoint Security for Linux Threat Prevention tool. (Cat II impact)

Discussion

Adding endpoint security tools can provide the capability to automatically take actions in response to malicious behavior, which can provide additional agility in reacting to network threats. These tools also often include a reporting capability to provide network awareness of the system, which may not otherwise exist in an organization's systems management regime.

Check Content

Check that the following package has been installed: # rpm -qa | grep -i mcafeetp If the "mcafeetp" package is not installed, this is a finding. Verify that the daemon is running: # ps -ef | grep -i mfetpd If the daemon is not running, this is a finding.

Fix Text

Install and enable the latest Trellix ENSLTP package.

Additional Identifiers

Rule ID: SV-234801r942857_rule

Vulnerability ID: V-234801

Group Title: SRG-OS-000191-GPOS-00080

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.