Important

   

This space contains documentation for TrueSight Server Automation 8.9.03 and the later service packs for 8.9. For earlier releases, see BMC Server Automation 8.9.

Updating CIS for Oracle Linux 6 to newer benchmarks

This document provides information about the hotfix containing Center for Internet Security (CIS) templates for Oracle Linux 6 Benchmark Version 1.1.0. This template contains implementation for 223 rules that can be installed on  TrueSight Server Automation 8.9.00 onwards.

This template contains the following types of rules:

  • Number of rules that check for compliance and provides remediation - 174
  • Number of rules that check for compliance but do not provide remediation - 42
  • Number of rules that do not check for compliance and do not provide remediation - 7

The following are the details of the rules that are divided into parts:

  • Number of rules that are not divided into parts - 206
  • Number of rules that are divided into two parts - 13 ( 13*2 =26)
  • Number of rules that are divided into three parts - 9 (9*3 =27)

The current rule count as per CIS - Oracle Linux 6 template after running the compliance job is 259 (206+ 26 + 27).

Before you begin

Before you install this hotfix, ensure that you perform the following:

  • Ensure that all compliance content provided by BMC in your environment is at least updated to version 8.9.
  • For all application servers in your environment, back up the <Application_Server_installation_directory >/share/sensors directory. This directory contains extended object scripts.

Downloading the Rolling Update

You obtain the files from the following FTP location:

The following tables list the files to download for the compliance content.

File name

Checksum

CIS - Oracle Linux 6.zip

4336a4c9fd7f5cbd2c88d2d72ea9a277

extended_objects.zip

208e2bc7cf675d6b7d15fabefd638374

Installing and importing the template

  1. Perform the following steps on all the Application Servers:

    1. Log on to the Application Server as a user with root or administrator privileges.

    2. Ensure that you have downloaded the zip files from the FTP location to the Application Server and verified the checksum. 

    3. Extract the extended_objects.zip file to a temporary directory on your Application Server.

    4. Replace the extended object scripts on the application servers in the following directory:
      <Application_Server_installation_directory >/share/sensors/
  2. As a BLAdmin user, log on to the TrueSight Server Automation Console.
  3. In the left navigation pane, right-click Component Templates and select Import
  4. In the Import Wizard window, select the Import (Version-neutral) option.
  5. Select the CIS - Oracle Linux 6.zip package from the temporary location and click Next.
  6. Ensure that you select the Update objects according to the imported package and Preserve template group path options and click Next.

  7. Navigate to the last screen of the wizard and then click Finish.

  8. Click OK.
  9. Review the Import Results tab and ensure that the templates are imported successfully.


  10. Click OK.
Was this page helpful? Yes No Submitting... Thank you

Comments