cis-ubuntu1604-v200-1-2-2

name	cis-ubuntu1604-v200-1-2-2
description	Ensure GPG keys are configured
category	cis-storage
version	2.0.0
author	cyberstrike-official
tags	["cis","ubuntu","linux","ubuntu-16.04","gpg","package-integrity","patch-management"]
cis_id	1.2.2
cis_benchmark	CIS Ubuntu Linux 16.04 LTS Benchmark v2.0.0
tech_stack	["ubuntu","linux"]
cwe_ids	[]
chains_with	[]
prerequisites	[]
severity_boost	{}

CIS Ubuntu Linux 16.04 LTS Benchmark v2.0.0 - 1.2.2

Profile Applicability

• Level 1 - Server
• Level 1 - Workstation

Description

Most packages managers implement GPG key signing to verify package integrity during installation.

Rationale

It is important to ensure that updates are obtained from a valid source to protect against spoofing that could lead to the inadvertent installation of malware on the system.

Audit Procedure

Command Line

Verify GPG keys are configured correctly for your package manager:

apt-key list

Expected Result

Verify GPG keys are configured correctly for your package manager.

Remediation

Command Line

Update your package manager GPG keys in accordance with site policy.

Default Value

Not applicable.

References

None.

CIS Controls

Controls Version	Control
v7	3.4 Deploy Automated Operating System Patch Management Tools
v7	3.5 Deploy Automated Software Patch Management Tools

Assessment Status

Manual