1.2.2 Ensure GPG keys are configured

Information

It is important to ensure that updates are obtained from a valid source to protect against spoofing that could lead to the inadvertent installation of malware on the system.

Solution

Update your package manager GPG keys in accordance with site policy.

See Also

https://workbench.cisecurity.org/files/1863

Item Details

Category: SYSTEM AND INFORMATION INTEGRITY

References: 800-53|SI-7(6), CSCv6|4.5

Plugin: Unix

Control ID: 9e87b4b722883fddf945b80bcf2c368fcda9acd1d932c71a0087c644958f58a3