STIGQter: STIG Summary: SUSE Linux Enterprise Server 15 Security Technical Implementation Guide Version: 2 Release: 8 Benchmark Date: 01 Jul 2026:

The SUSE operating system tool zypper must have gpgcheck enabled.

DISA Rule

SV-234852r1190822_rule

Vulnerability Number

V-234852

Group Title

SRG-OS-000366-GPOS-00153

Rule Version

SLES-15-010430

Severity

CAT I

CCI(s)

CCI-003992 - Prevent the installation of organization-defined software and firmware components without verification that the component has been digitally signed using a certificate that is recognized and approved by the organization.

Weight

Fix Recommendation

Configure the SLES 12 zypper tool to enable gpgcheck.

Add or modify the following line in the "/etc/zypp/zypp.conf" file or remove the line completely ensuring that the default zypper setting is enabled:

gpgcheck = on

Check Contents

Verify the SLES 12 zypper tool has gpgcheck enabled with the following command:

> grep -i '^gpgcheck' /etc/zypp/zypp.conf

If "gpgcheck" is set to "off", this is a finding.

Vulnerability Number

V-234852

Documentable

False

Rule Version

SLES-15-010430

Severity Override Guidance

Verify the SLES 12 zypper tool has gpgcheck enabled with the following command:

> grep -i '^gpgcheck' /etc/zypp/zypp.conf

If "gpgcheck" is set to "off", this is a finding.

Check Content Reference

Target Key

5274