Ensure system firmware updates are installed

低级别 1人工审核aix

说明

Security vulnerabilities and functional improvements are regularly addressed through firmware updates to the system and adapter firmware. Unpatched system or adapter firmware can expose systems to known vulnerabilities that may be exploited by attackers. It is recommended that system and adadpter firmware updates be performed on enterprise assets on a regular basis.

检查方式

审计方法: 人工审核

此项建议无法自动检查。当您传入 --include-manual 时，扫描结果会列出该项并附带这些说明。

Execute the following command to obtain details of the hardware model and firmware # /usr/sbin/lsconf 2> /dev/null | /usr/bin/grep -E "System Model|Firmware" Compare the installed firmware with the latest available from IBM FixCentral for the identified hardware model. Note: This command should only be run on an partition which has physical hardware adaptors assigned to it. e.g. a partition configured as VIOS.

修复方式

修复方法: 操作指南或基础设施补丁

Download the latest available from IBM FixCentral for the identified hardware model and follow the provided instructions to apply to the system/adapter

属性

操作系统: 任意
标签: aixservices
参考: CIS IBM AIX 7 Benchmark v1.2.0 - 7.2 Ensure system firmware updates are installed