Skip to content
Log In

Uninstall avahi-autoipd Server Package

An XCCDF Rule

Description

If the system does not need to have an Avahi server which implements the DNS Service Discovery and Multicast DNS protocols, the avahi-autoipd and avahi packages can be uninstalled.

Rationale

Automatic discovery of network services is not normally required for system functionality. It is recommended to remove this package to reduce the potential attack surface.

ID
xccdf_org.ssgproject.content_rule_package_avahi-autoipd_removed
Severity
Medium
References
Updated

Remediation Templates

A Puppet Snippet

include remove_avahi-autoipd
class remove_avahi-autoipd {
  package { 'avahi-autoipd':
    ensure => 'purged',
  }
}

An Ansible Snippet

- name: Ensure avahi-autoipd is removed
  package:
    name: avahi-autoipd
    state: absent
  tags:
  - NIST-800-53-CM-6(a)

script:kickstart

package remove avahi-autoipd

script:bootc

dnf remove avahi-autoipd

Anaconda Pre-Install Instructions

package --remove=avahi-autoipd

A Shell Script

# CAUTION: This remediation script will remove avahi-autoipd
#	   from the system, and may remove any packages
#	   that depend on avahi-autoipd. Execute this
#	   remediation AFTER testing on a non-production
#	   system!