CM-05(03) Signed Components

STIG rules that implement this control 8

Application Security and Development V6R5

• APSC-DV-001430 CAT II The application must have the capability to prevent the installation of patches, service packs, or application components without verification the software component has been digitally signed using a certificate that is recognized and approved by the organization.

Canonical Ubuntu 22.04 LTS V2R10

• UBTU-22-214010 CAT III Ubuntu 22.04 LTS must be configured so that the Advance Package Tool (APT) prevents the installation of patches, service packs, device drivers, or operating system components without verification they have been digitally signed using a certificate that is recognized and approved by the organization.

Red Hat Enterprise Linux 9 V2R10

• RHEL-09-213020 CAT II RHEL 9 must prevent the loading of a new kernel for later execution.
• RHEL-09-214010 CAT II RHEL 9 must ensure cryptographic verification of vendor software packages.
• RHEL-09-214015 CAT I RHEL 9 must check the GPG signature of software packages originating from external software repositories before installation.
• RHEL-09-214020 CAT I RHEL 9 must check the GPG signature of locally installed software packages before installation.
• RHEL-09-214025 CAT I RHEL 9 must have GPG signature verification enabled for all software repositories.
• RHEL-09-215010 CAT II RHEL 9 subscription-manager package must be installed.