Apply Applicable Updates

보통레벨 1수동 검토bind

설명

Over time, patches will be released to resolve defects in BIND. It is recommended that such patches be applied soon after they are available based on risk. High risk vulnerabilities should be patched within 30 days of availability. Manual review: the check needs remote queries, architecture knowledge or site policy.

점검 방법

감사 방식: 수동 검토

이 권장 사항은 자동으로 점검할 수 없습니다. --include-manual 옵션을 전달하면 스캔 결과에 이 지침과 함께 표시됩니다.

Verify that the latest patch for the platform version of BIND is installed within 30 days of being available. Use the -v option to named to get the details version information. $ /sbin/named -v BIND 9.11.4-P2-RedHat-9.11.4-x.x.x

조치 방법

조치 방식: 가이드 또는 인프라 패치

Update BIND to the most current revision available. Institute a patch process that aims to apply security updates within 30 days of their release. Subscribe to bind- announce@lists.isc.org on the https://www.isc.org web site to receive notifications of available BIND updates.

속성

운영 체제: 모두
태그: binddnsoperations
참고 자료: CIS ISC BIND DNS Server 9.11 Benchmark v1.0.0 - 9.1 Apply Applicable Updates