Uninstall krb5-workstation Package

An XCCDF Rule

Description

The krb5-workstation package can be removed with the following command:

$ sudo yum erase krb5-workstation

Rationale

Kerberos is a network authentication system. The krb5-workstation package contains the basic Kerberos programs (kinit, klist, kdestroy, kpasswd).

ID: xccdf_org.ssgproject.content_rule_package_krb5-workstation_removed
Severity: Medium
References: CCI-000803

SRG-OS-000095-GPOS-00049 SRG-OS-000120-GPOS-00061
Updated: about 1 year ago

- name: Ensure krb5-workstation is removed
  package:
    name: krb5-workstation
    state: absent
  tags:
  - disable_strategy  - low_complexity
  - low_disruption
  - medium_severity
  - no_reboot_needed
  - package_krb5-workstation_removed

include remove_krb5-workstation

class remove_krb5-workstation {
  package { 'krb5-workstation':
    ensure => 'purged',
  }}


# CAUTION: This remediation script will remove krb5-workstation
#	   from the system, and may remove any packages
#	   that depend on krb5-workstation. Execute this
#	   remediation AFTER testing on a non-production
#	   system!
if rpm -q --quiet "krb5-workstation" ; then

    yum remove -y "krb5-workstation"

fi


package --remove=krb5-workstation

Uninstall krb5-workstation Package

Description

Rationale

Remediation - Ansible

Remediation - Puppet

Remediation - Shell Script

Remediation - Anaconda Pre-Install Instructions