CIS: Oracle Linux 6
This topic provides information about the hotfix containing Center for Internet Security (CIS) templates for Oracle Linux 6 Benchmark Version 1.1.0. This template contains implementation for 223 rules that can be installed on TrueSight Server Automation 8.9.00 onwards.
This template contains the following types of rules:
- Number of rules that check for compliance and provides remediation - 174
- Number of rules that check for compliance but do not provide remediation - 42
- Number of rules that do not check for compliance and do not provide remediation - 7
The following are the details of the rules that are divided into parts:
- Number of rules that are not divided into parts - 206
- Number of rules that are divided into two parts - 13 ( 13*2 =26)
- Number of rules that are divided into three parts - 9 (9*3 =27)
The current rule count as per CIS - Oracle Linux 6 template after running the compliance job is 259 (206+ 26 + 27).
Before you begin
Before you install this hotfix, ensure that you perform the following:
- Ensure that all compliance content provided by BMC in your environment is at least updated to version 8.9.
- For all application servers in your environment, back up the <Application_Server_installation_directory >/share/sensors directory. This directory contains extended object scripts.
Downloading the Rolling Update
You obtain the files from the following FTP location:
The following tables list the files to download for the compliance content.
File name | Checksum |
---|---|
CIS - Oracle Linux 6.zip | 4336a4c9fd7f5cbd2c88d2d72ea9a277 |
extended_objects.zip | 208e2bc7cf675d6b7d15fabefd638374 |
Installing and importing the template
- Perform the following steps on all the Application Servers:
- Log on to the Application Server as a user with root or administrator privileges.
- Ensure that you have downloaded the zip files from the FTP location to the Application Server and verified the checksum.
- Extract the extended_objects.zip file to a temporary directory on your Application Server.
- Replace the extended object scripts on the application servers in the following directory:
<Application_Server_installation_directory >/share/sensors/
- As a BLAdmin user, log on to the TrueSight Server Automation Console.
- In the left navigation pane, right-click Component Templates and select Import.
- In the Import Wizard window, select the Import (Version-neutral) option.
- Select the CIS - Oracle Linux 6.zip package from the temporary location and click Next.
- Ensure that you select the Update objects according to the imported package and Preserve template group path options and click Next.
- Navigate to the last screen of the wizard and then click Finish.
- Click OK.
- Review the Import Results tab and ensure that the templates are imported successfully.
- Click OK.