SecScan centos7:1:2
https://secscan.acron.pl/
2026-08-31T15:27:12+00:00SecScan
https://secscan.acron.pl/
https://secscan.acron.pl/lib/tpl/bootstrap3/images/favicon.icotext/html2017-05-05T22:30:48+00:00Anonymous (anonymous@undisclosed.example.com)1.2.1 Ensure package manager repositories are configured (Not Scored)
https://secscan.acron.pl/centos7/1/2/1?rev=1494016248&do=diff
1.2.1 Ensure package manager repositories are configured (Not Scored)
Profile Applicability
Description
Systems need to have package manager repositories configured to ensure they receive the latest patches and updates.
Rationale
If a system's package repositories are misconfigured important patches may not be identified or a rogue repository could introduce compromised software.text/html2017-05-05T22:34:10+00:00Anonymous (anonymous@undisclosed.example.com)1.2.2 Ensure GPG keys are configured (Not Scored)
https://secscan.acron.pl/centos7/1/2/2?rev=1494016450&do=diff
1.2.2 Ensure GPG keys are configured (Not Scored)
Profile Applicability
Description
Most packages managers implement GPG key signing to verify package integrity during installation.
Rationale
It is important to ensure that updates are obtained from a valid source to protect against spoofing that could lead to the inadvertent installation of malware on the system.text/html2017-05-05T22:47:44+00:00Anonymous (anonymous@undisclosed.example.com)1.2.3 Ensure gpgcheck is globally activated (Scored)
https://secscan.acron.pl/centos7/1/2/3?rev=1494017264&do=diff
1.2.3 Ensure gpgcheck is globally activated (Scored)
Profile Applicability
Description
The gpgcheck option, found in the main section of the /etc/yum.conf and individual /etc/yum/repos.d/* files determines if an RPM package's signature is checked prior to its installation.