Ensure system firmware updates are installed

低レベル 1手動レビューaix

説明

Security vulnerabilities and functional improvements are regularly addressed through firmware updates to the system and adapter firmware. Unpatched system or adapter firmware can expose systems to known vulnerabilities that may be exploited by attackers. It is recommended that system and adadpter firmware updates be performed on enterprise assets on a regular basis.

チェック方法

監査方法: 手動レビュー

この推奨事項は自動ではチェックできません。--include-manual を指定すると、スキャン結果にこの手順付きで一覧表示されます。

Execute the following command to obtain details of the hardware model and firmware # /usr/sbin/lsconf 2> /dev/null | /usr/bin/grep -E "System Model|Firmware" Compare the installed firmware with the latest available from IBM FixCentral for the identified hardware model. Note: This command should only be run on an partition which has physical hardware adaptors assigned to it. e.g. a partition configured as VIOS.

修正方法

修正方法: ガイダンスまたは IaC パッチ

Download the latest available from IBM FixCentral for the identified hardware model and follow the provided instructions to apply to the system/adapter

プロパティ

オペレーティングシステム: すべて
タグ: aixservices
参照: CIS IBM AIX 7 Benchmark v1.2.0 - 7.2 Ensure system firmware updates are installed