+SYS.2.3.A5 Secure Installation of Software Packages (B)

SYS.2.3.A5 Secure Installation of Software Packages (B)

If software requiring installation is to be compiled from source code, the software MUST ONLY be unpacked, configured, and compiled using an unprivileged user account. The software to be installed MUST NOT then be installed in the root file system of the operating system in question in an uncontrolled manner.

If the software is compiled from source text, the selected parameters SHOULD be documented appropriately. Based on this documentation, it SHOULD be possible to compile the software in a transparent and reproducible manner at any time. All further installation steps SHOULD also be documented so that the configuration can be reproduced quickly in emergencies.

1. Übersicht

1.1 Referenzen

1.2 Identifizierte Anforderungen

1.3 Zugehörige Regulierungen

2. Identifizierte Anforderungen

Anforderungen

3. Zugehörige Regulierungen

Regulierungen

Verknüpfte Vorgänge

Verknüpfungen
blocks G 0.20 Information or Products from an Unreliable Source
blocks G 0.21 Manipulation with Hardware or Software
blocks G 0.28 Software Vulnerabilities or Errors
blocks G 0.39 Malware