Ensure updates, patches, and additional security software are installed

MediumLevel 1Manual reviewbottlerocket

Description

Periodically updates are released for included software either due to security flaws or to include additional functionality. Manual review against site policy.

How it is checked

Audit method: Manual review

This recommendation cannot be checked automatically. A scan lists it with these instructions when you pass --include-manual.

Verify there are no updates to install. This command should display a list of available updates and return without error: # apiclient update check

How it is fixed

Fix method: Guidance or infrastructure patch

Update the software on the system according to site policy. This command will apply the latest available update and reboot the system to apply it if necessary: # apiclient update apply --check --reboot

Properties

Operating systems: Any
Tags: bottlerocketsystem
Reference: CIS Bottlerocket Benchmark v1.0.0 - 1.6 Ensure updates, patches, and additional security software are installed