Packages: 120 controls for Linux hardening

The domain in figures

What does Pavois check in this domain?

inventory state 120

Checked against what is installed or registered, packages present/absent, account databases.

Which standards does this domain cover?

One effective-configuration check serves as evidence for several standards at once. The references below are the ones the corpus actually carries, never a claimed equivalence. how to read a standard mapping.

CIS

1.3.1.1, 1.3.1.7, 1.3.1.8, 1.5.4, 1.7.1, 1.8.1, 2.1.1, 2.1.2, 2.1.3, 2.1.4, 2.1.5, 2.1.6, 2.1.7, 2.1.8, 2.1.9, 2.1.10, 2.1.11, 2.1.12, 2.1.13, 2.1.14, 2.1.15, 2.1.16, 2.1.17, 2.1.18, 2.1.19, 2.1.20, 2.1.21, 2.1.22, 2.2.1, 2.2.2, 2.2.3, 2.2.4, 2.2.5, 2.2.6, 2.4.1.1, 4.1.1, 4.1.2, 5.2.1, 5.3.1.1, 5.3.1.2, 5.3.1.3, 5.3.2.3, 6.1.1, 6.1.2.1.1, 6.2.1.1, 6.2.1.2.1, 6.2.2.1.1, 6.3.1, 6.3.1.1, 6.3.2.4, 10.2.1, 10.3.3, 10.5.1, 11.5.2

ANSSI BP-028

R33, R45, R49, R61, R62, R67, R71, R76

NIST 800-53

3.1.10, 3.1.13, AC-3(4), AC-6(8), AC-6(10), AC-7(a), AU-2(a), AU-7(1), AU-7(2), AU-12(2), AU-14, CM-6(a), CM-7, CM-7(2), CM-7(5)(b), CM-7(a), CM-7(b), IA-5(1).1(v), IA-5(1)(c), SC-7(21)

PCI DSS

1.2.1, 1.2.6, 2.2.4, 2.2.6, 3.5.1.2, 10.2.1, 10.3.3, 10.5.1, 11.5.2

DISA STIG

UBTU-22-215010, UBTU-22-215030, UBTU-22-215035, UBTU-22-215040, UBTU-22-254010, UBTU-22-255010, UBTU-22-431010, UBTU-22-612015, UBTU-22-651010, UBTU-22-653010, UBTU-22-653020, UBTU-24-100030, UBTU-24-100040, UBTU-24-100050, UBTU-24-100100, UBTU-24-100400, UBTU-24-100450, UBTU-24-100500, UBTU-24-100600, UBTU-24-100650, UBTU-24-100800, UBTU-24-100900

The 120 controls of the Packages domain

Sources & references

Full control catalogue · All control domains