diff --git a/lib/post_install_tasks/package_management.md b/lib/post_install_tasks/package_management.md new file mode 100644 index 0000000..84a2e20 --- /dev/null +++ b/lib/post_install_tasks/package_management.md @@ -0,0 +1,51 @@ +## Post install tasks + +### Package management + +#### :information_source: Introduction + +Package manager is a popular way to distribute software. It's also provide a privileged, central mechanism for the management of software on your operating system. + +#### :eight_pointed_black_star: Check package signatures + +###### RedHat/CentOS + +```bash +# Edit '[main]' section in /etc/yum.conf +gpgcheck=1 +``` + +###### Policy + +| Type | Severity | Reference | Comment | +| :--- | :--- | :--- | :--- | +| OpenSCAP | High | [Ensure gpgcheck Enabled In Main yum Configuration ](https://static.open-scap.org/ssg-guides/ssg-centos7-guide-pci-dss.html#xccdf_org.ssgproject.content_rule_ensure_gpgcheck_globally_activated) | | +| STIG | | | | +| CIS | | | | + +#### :eight_pointed_black_star: Remove packages with known issues + +###### RedHat/CentOS + +```bash + +``` + +###### Policy + +| Type | Severity | Reference | Comment | +| :--- | :--- | :--- | :--- | +| OpenSCAP | | | | +| STIG | | | | +| CIS | | | | + +#### :eight_spoked_asterisk: Useful resources + + + +#### :ballot_box_with_check: Summary checklist + +| Item | True | False | +| :--- | :---: | :---: | +| | :black_square_button: | :black_square_button: | +| | :black_square_button: | :black_square_button: |