{"description": "Ensure virus definition files are no older than 7 days or their last release.", "rationale": "Virus scanning software can be used to detect if a system has been compromised by\ncomputer viruses, as well as to limit their spread to other systems.", "severity": "medium", "references": {"cis-csc": ["12", "13", "14", "4", "7", "8"], "cobit5": ["APO01.06", "APO13.02", "BAI02.01", "BAI06.01", "DSS04.07", "DSS05.01", "DSS05.02", "DSS05.03", "DSS06.06"], "isa-62443-2009": ["4.3.4.3.8", "4.4.3.2"], "isa-62443-2013": ["SR 3.2", "SR 3.3", "SR 3.4", "SR 4.1"], "iso27001-2013": ["A.12.2.1", "A.14.2.8", "A.8.2.3"], "nist": ["CM-6(a)", "SC-28", "SI-3(a)", "SI-3(b)", "SI-3(2)"], "nist-csf": ["DE.CM-4", "DE.DP-3", "PR.DS-1"], "srg": ["SRG-OS-000480-GPOS-00227"]}, "control_references": {}, "components": [], "identifiers": {}, "ocil_clause": "signatures are out of date", "ocil": "To check on the age of McAfee virus definition files, run the following command:\n<pre>$ sudo cd /opt/NAI/LinuxShield/engine/dat\n$ sudo ls -la avvscan.dat avvnames.dat avvclean.dat</pre>", "oval_external_content": null, "fixtext": "", "checktext": "", "vuldiscussion": "", "srg_requirement": "", "warnings": [], "conflicts": [], "requires": [], "policy_specific_content": {}, "platform": "system_with_kernel", "platforms": ["system_with_kernel"], "sce_metadata": {}, "inherited_platforms": [], "cpe_platform_names": ["system_with_kernel"], "inherited_cpe_platform_names": [], "bash_conditional": null, "fixes": {}, "title": "Virus Scanning Software Definitions Are Updated", "definition_location": "/aptdata/openscap/scap-security-guide/linux_os/guide/system/software/integrity/endpoint_security_software/mcafee_security_software/mcafee_antivirus_definitions_updated/rule.yml", "template": null}