the-practical-linux-hardening-guide/lib/post_install_tasks/package_management.md

Post install tasks

Package management

ℹ️ Introduction

Package manager is a popular way to distribute software. It's also provide a privileged, central mechanism for the management of software on your operating system.

✴️ Check package signatures

RedHat/CentOS

# Edit '[main]' section in /etc/yum.conf
gpgcheck=1

Policy

Type	Severity	Reference	Comment
OpenSCAP	High	Ensure gpgcheck Enabled In Main yum Configuration
STIG
CIS

✴️ Remove packages with known issues

RedHat/CentOS

Policy

Type	Severity	Reference	Comment
OpenSCAP
STIG
CIS

✳️ Useful resources

☑️ Summary checklist

Item	True	False
	🔲	🔲
	🔲	🔲