Ensure updates, patches, and additional security software are installed

SedangLevel 1Tinjauan manualbottlerocket

Deskripsi

Periodically updates are released for included software either due to security flaws or to include additional functionality. Manual review against site policy.

Cara pemeriksaan

Metode audit: Tinjauan manual

Rekomendasi ini tidak dapat diperiksa secara otomatis. Pemindaian akan menampilkannya beserta petunjuk ini saat Anda memberikan opsi --include-manual.

Verify there are no updates to install. This command should display a list of available updates and return without error: # apiclient update check

Cara perbaikan

Metode perbaikan: Panduan atau patch infrastruktur

Update the software on the system according to site policy. This command will apply the latest available update and reboot the system to apply it if necessary: # apiclient update apply --check --reboot

Properti

Sistem operasi: Apa saja
Tag: bottlerocketsystem
Referensi: CIS Bottlerocket Benchmark v1.0.0 - 1.6 Ensure updates, patches, and additional security software are installed