-
Notifications
You must be signed in to change notification settings - Fork 0
/
RHEL-06-000008.sh
executable file
·80 lines (68 loc) · 2.51 KB
/
RHEL-06-000008.sh
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
#!/bin/bash
#
##########################################################################
#Red Hat Enterprise Linux 6 - DISA STIG Compliance Remediation Content
#Copyright (C) 2013
#Vincent C. Passaro ([email protected])
#
##########################################################################
#
###################### Buddha Labs LLC ################################
# By Vincent C. Passaro #
# Buddha Labs LLC. #
# vince[@]buddhalabs[.]com #
# www.buddhalabs.com #
###################### Buddha Labs LLC ################################
#_________________________________________________________________________
# Version | Change Information | Author | Date
#-------------------------------------------------------------------------
# 1.0 | Initial Script Creation | Vincent Passaro | 1-JUNE-2013
#
#
#######################DISA INFORMATION##################################
# Group ID (Vulid): RHEL-06-000008
# Group Title: SRG-OS-000090
#
# Rule ID: RHEL-06-000008_rule
# Severity: high
# Rule Version (STIG-ID): RHEL-06-000008
# Rule Title: Vendor-provided cryptographic certificates must be
# installed to verify the integrity of system software.
#
# Vulnerability Discussion: This key is necessary to cryptographically
# verify packages are from Red Hat.
#
# Responsibility:
# IAControls:
#
# Check Content:
#
# To ensure that the GPG key is installed, run:
# $ rpm -q --queryformat "%{SUMMARY}\n" gpg-pubkey
# The command should return the string below:
# gpg(Red Hat, Inc. (release key <[email protected]>)
# If the Red Hat GPG Key is not installed, this is a finding.
#
# Fix Text:
#
# To ensure the system can cryptographically verify base software
# packages come from Red Hat (and to connect to the Red Hat Network to
# receive them if desired), the Red Hat GPG key must properly be installed.
# To ensure the GPG key is installed, run:
# rhn_register
#######################DISA INFORMATION##################################
#
# Global Variables
PDI=RHEL-06-000008
SEVERITY=high
#
#BEGIN_CHECK
. ./aqueduct_functions
if rpm -q --queryformat "%{SUMMARY}\n" gpg-pubkey >/dev/null; then
show_message $PDI "GPG key check" pass
else
show_message $PDI "GPG key check" $SEVERITY
fi
#END_CHECK
#BEGIN_REMEDY
#END_REMEDY