cis-ubuntu2004-v300-5-3-1-2

name	cis-ubuntu2004-v300-5-3-1-2
description	Ensure latest version of libpam-modules is installed
category	cis-iam
version	3.0.0
author	cyberstrike-official
tags	["cis","ubuntu","linux","ubuntu-20.04","pam","authentication"]
cis_id	5.3.1.2
cis_benchmark	CIS Ubuntu Linux 20.04 LTS Benchmark v3.0.0
tech_stack	["ubuntu","linux"]
cwe_ids	[]
chains_with	[]
prerequisites	[]
severity_boost	{}

5.3.1.2 Ensure latest version of libpam-modules is installed (Automated)

Profile Applicability

• Level 1 - Server
• Level 1 - Workstation

Description

libpam-modules is a package containing a set of Pluggable Authentication Modules (PAM) which allows system administrators to configure different authentication methods for user logins, providing flexibility in how users can access applications by using various authentication modules to include password checks and other security mechanisms.

Rationale

Older versions of the libpam-modules package may not include the latest security and feature patches and updates.

Note: This Benchmark includes Recommendations that depend on newer libpam-modules features. These recommendations were written and tested against version 1.3.1-5ubuntu4.7. The latest available version should be used.

Audit Procedure

Command Line

Run the following command to verify libpam-modules is installed:

# dpkg-query -s libpam-modules &>/dev/null && echo "libpam-modules is installed"

Run the following command to verify libpam-modules is the latest version:

# apt list --upgradable 2>&1 | grep -P '^libpam-modules\b'

Expected Result

The first command should return:

libpam-modules is installed

The second command should return nothing.

Remediation

Command Line

Run the following command to install the latest version of libpam-modules:

# apt install libpam-modules

References

None listed.

CIS Controls

Controls Version	Control	IG 1	IG 2	IG 3
v8	0.0 Explicitly Not Mapped
v7	0.0 Explicitly Not Mapped