Guide to the Secure Configuration of Red Hat Enterprise Linux 8
Rules, Groups, and Values defined within the XCCDF Benchmark
-
Uninstall abrt-plugin-logger Package
Theabrt-plugin-logger
package can be removed with the following command:$ sudo yum erase abrt-plugin-logger
Rule Low Severity -
Uninstall abrt-plugin-rhtsupport Package
Theabrt-plugin-rhtsupport
package can be removed with the following command:$ sudo yum erase abrt-plugin-rhtsupport
Rule Low Severity -
Uninstall abrt-plugin-sosreport Package
Theabrt-plugin-sosreport
package can be removed with the following command:$ sudo yum erase abrt-plugin-sosreport
Rule Low Severity -
Uninstall geolite2-city Package
Thegeolite2-city
package can be removed with the following command:$ sudo yum erase geolite2-city
Rule Low Severity -
Uninstall geolite2-country Package
Thegeolite2-country
package can be removed with the following command:$ sudo yum erase geolite2-country
Rule Low Severity -
Uninstall gssproxy Package
Thegssproxy
package can be removed with the following command:$ sudo yum erase gssproxy
Rule Medium Severity -
Uninstall iprutils Package
Theiprutils
package can be removed with the following command:$ sudo yum erase iprutils
Rule Medium Severity -
Uninstall krb5-workstation Package
Thekrb5-workstation
package can be removed with the following command:$ sudo yum erase krb5-workstation
Rule Medium Severity -
Uninstall libreport-plugin-logger Package
Thelibreport-plugin-logger
package can be removed with the following command:$ sudo yum erase libreport-plugin-logger
Rule Low Severity -
Uninstall libreport-plugin-rhtsupport Package
The <code>libreport-plugin-rhtsupport</code> package can be removed with the following command: <pre> $ sudo yum erase libreport-plugin-rhtsupport<...Rule Low Severity -
Uninstall pigz Package
Thepigz
package can be removed with the following command:$ sudo yum erase pigz
Rule Low Severity -
Uninstall python3-abrt-addon Package
Thepython3-abrt-addon
package can be removed with the following command:$ sudo yum erase python3-abrt-addon
Rule Low Severity -
Uninstall tuned Package
Thetuned
package can be removed with the following command:$ sudo yum erase tuned
Rule Medium Severity -
Updating Software
The <code>yum</code> command line tool is used to install and update software packages. The system also provides a graphical software update tool i...Group -
Install dnf-automatic Package
Thednf-automatic
package can be installed with the following command:$ sudo yum install dnf-automatic
Rule Medium Severity -
Ensure yum Removes Previous Package Versions
<code>yum</code> should be configured to remove previous software components after new versions have been installed. To configure <code>yum</code> ...Rule Low Severity -
Configure dnf-automatic to Install Available Updates Automatically
To ensure that the packages comprising the available updates will be automatically installed by <code>dnf-automatic</code>, set <code>apply_updates...Rule Medium Severity -
Configure dnf-automatic to Install Only Security Updates
To configure <code>dnf-automatic</code> to install only security updates automatically, set <code>upgrade_type</code> to <code>security</code> unde...Rule Low Severity -
Ensure gpgcheck Enabled In Main yum Configuration
The <code>gpgcheck</code> option controls whether RPM packages' signatures are always checked prior to installation. To configure yum to check pack...Rule High Severity -
Ensure gpgcheck Enabled for Local Packages
<code>yum</code> should be configured to verify the signature(s) of local packages prior to installation. To configure <code>yum</code> to verify s...Rule High Severity
Node 2
The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.