Details
This key is necessary to cryptographically verify packages that packages are from the operating system vendor.
Solution
To ensure the system can cryptographically verify the software packages come from the operating system vendor (and connect to the vendor's network software repository to receive them if desired), the vendor GPG key must properly be installed. To ensure the GPG key is installed, run:
# wget http://public-yum.oracle.com/RPM-GPG-KEY-oracle-ol6
# rpm --import RPM-GPG-KEY-oracle-ol6
Supportive Information
The following resource is also helpful.
This security hardening control applies to the following category of controls within NIST 800-53: Configuration Management.This control applies to the following type of system Unix.
References
- 800-53|CM-5(3)
- CAT|I
- CCI|CCI-001749
- CSCv6|2.2
- Group-ID|V-50689
- Rule-ID|SV-219543r603263_rule
- STIG-ID|OL6-00-000008
- STIG-Legacy|SV-64895
- STIG-Legacy|V-50689
- Vuln-ID|V-219543
Comments
Please sign in to leave a comment.