| name | cis-ubuntu1804-v220-1-3-2 |
| description | Ensure package manager repositories are configured |
| category | cis-storage |
| version | 2.2.0 |
| author | cyberstrike-official |
| tags | ["cis","ubuntu","linux","ubuntu-18.04","apt","repositories","package-manager"] |
| cis_id | 1.3.2 |
| cis_benchmark | CIS Ubuntu Linux 18.04 LTS Benchmark v2.2.0 |
| tech_stack | ["ubuntu","linux"] |
| cwe_ids | [] |
| chains_with | [] |
| prerequisites | [] |
| severity_boost | {} |
1.3.2 Ensure package manager repositories are configured (Manual)
Profile Applicability
- Level 1 - Server
- Level 1 - Workstation
Description
Systems need to have package manager repositories configured to ensure they receive the latest patches and updates.
Rationale
If a system's package repositories are misconfigured important patches may not be identified or a rogue repository could introduce compromised software.
Audit Procedure
Command Line
Run the following command and verify package repositories are configured correctly:
apt-cache policy
Expected Result
Package repositories should be properly configured according to site policy.
Remediation
Command Line
Configure your package manager repositories according to site policy.
References
- NIST SP 800-53 Rev. 5: SI-2
CIS Controls
| Controls Version | Control | IG 1 | IG 2 | IG 3 |
|---|
| v8 | 7.3 Perform Automated Operating System Patch Management | X | X | X |
| v7 | 3.4 Deploy Automated Operating System Patch Management Tools | X | X | X |
| v7 | 3.5 Deploy Automated Software Patch Management Tools | X | X | X |
MITRE ATT&CK Mappings
| Techniques / Sub-techniques | Tactics | Mitigations |
|---|
| T1068, T1068.000, T1195, T1195.001, T1195.002, T1203, T1203.000, T1210, T1210.000, T1211, T1211.000, T1212, T1212.000 | TA0001 | M1051 |
