Ensure system firmware updates are installed

НизкийУровень 1Ручная проверкаaix

Описание

Security vulnerabilities and functional improvements are regularly addressed through firmware updates to the system and adapter firmware. Unpatched system or adapter firmware can expose systems to known vulnerabilities that may be exploited by attackers. It is recommended that system and adadpter firmware updates be performed on enterprise assets on a regular basis.

Как проверяется

Метод проверки: Ручная проверка

Эту рекомендацию нельзя проверить автоматически. Сканирование выводит её вместе с этими инструкциями при указании флага --include-manual.

Execute the following command to obtain details of the hardware model and firmware # /usr/sbin/lsconf 2> /dev/null | /usr/bin/grep -E "System Model|Firmware" Compare the installed firmware with the latest available from IBM FixCentral for the identified hardware model. Note: This command should only be run on an partition which has physical hardware adaptors assigned to it. e.g. a partition configured as VIOS.

Как исправляется

Метод исправления: Рекомендация или патч инфраструктуры

Download the latest available from IBM FixCentral for the identified hardware model and follow the provided instructions to apply to the system/adapter

Свойства

Операционные системы: Любая
Теги: aixservices
Источник: CIS IBM AIX 7 Benchmark v1.2.0 - 7.2 Ensure system firmware updates are installed