Uninstall talk-server Package
An XCCDF Rule
Description
The talk-server package can be removed with the following command:
$ sudo dnf erase talk-server
warning alert: Warning
The package is not available in Red Hat Enterprise Linux 9.
Rationale
The talk software presents a security risk as it uses unencrypted protocols
for communications. Removing the talk-server package decreases the
risk of the accidental (or intentional) activation of talk services.
- ID
- xccdf_org.ssgproject.content_rule_package_talk-server_removed
- Severity
- Medium
- References
- Updated
Remediation - Puppet
include remove_talk-server
class remove_talk-server {
package { 'talk-server':
ensure => 'purged',
}
Remediation - Shell Script
# CAUTION: This remediation script will remove talk-server
# from the system, and may remove any packages
# that depend on talk-server. Execute this
# remediation AFTER testing on a non-production
# system!
Remediation - Anaconda Pre-Install Instructions
package --remove=talk-server
Remediation - Ansible
- name: Ensure talk-server is removed
package:
name: talk-server
state: absent
tags:
- PCI-DSSv4-2.2.4