Ensure package manager repositories are properly configured

Trung bìnhCấp 1Xem xét thủ côngnginx

Mô tả

Package repositories must be trustworthy, properly configured, and maintained to ensure the system receives timely security patches, bug fixes, and support for modern protocols. While Operating System (OS) vendors provide NGINX packages, these versions are often frozen at older release points ("stable" but stale). Manual review: the benchmark gives no reliable automated check for this control.

Cách kiểm tra

Phương pháp kiểm tra: Xem xét thủ công

Khuyến nghị này không thể kiểm tra tự động. Lần quét sẽ liệt kê mục này kèm hướng dẫn khi bạn truyền cờ --include-manual.

To verify that package manager repositories are configured correctly and point to a trusted source (either the OS vendor or official NGINX), run the following commands: Red Hat / Rocky-Linux: dnf repolist -v | grep -i nginx Debian / Ubuntu: apt-cache policy nginx Evaluation: Verify that the repository URL points to a trusted domain (e.g., nginx.org, rhel..., ubuntu...). Ensure that the repository is enabled. Check that no unknown or untrusted third-party repositories are configured for NGINX.

Cách khắc phục

Phương pháp khắc phục: Hướng dẫn hoặc bản vá hạ tầng

Configure your package manager to use a trusted repository that meets your version requirements. To enable the official NGINX repository (Recommended for HTTP/3 support): Follow the instructions at nginx.org/en/linux_packages.html for your specific distribution. This typically involves adding the NGINX signing key and creating a repository configuration file.

Thuộc tính

Hệ điều hành: Bất kỳ
Thẻ: nginxinstallation
Tham chiếu: CIS NGINX Benchmark v3.0.0 - 1.2.1 Ensure package manager repositories are properly configured