openstack/ansible-hardening
Code Issues Proposed changes
ansible-hardening/doc/metadata/rhel7/RHEL-07-020151.rst
Rahul Nair 4e8bf6705f Trivial fix to the documentation 
- Removing extra space
_ Fixing some typos

Change-Id: Ib4f86c7a29074ce0150a3cd55478ed94f2d62c43
2016-12-05 11:24:34 -06:00

629 B
Raw Blame History

---id: RHEL-07-020151 status: implemented tag: packages ---

On Ubuntu systems, the tasks comment out the no-debsig configuration line in /etc/dpkg/dpkg.cfg. This causes dpkg to verify GPG signatures for all packages that are installed locally.

On CentOS 7 systems, the tasks set the localpkg_gpgcheck option to 1 in the /etc/yum.conf file. This enables GPG checks for all packages installed locally with yum.

Setting security_enable_gpgcheck_packages_local to no will skip the no-debsig adjustment on Ubuntu and it will set local_gpgcheck=0 in /etc/yum.conf on CentOS systems.