Uninstall setroubleshoot-plugins Package
An XCCDF Rule
Description
The SETroubleshoot plugins are used to analyze SELinux AVC data. The service provides information around configuration errors,
unauthorized intrusions, and other potential errors.
The setroubleshoot-plugins package can be removed with the following command:
$ sudo yum erase setroubleshoot-plugins
Rationale
The SETroubleshoot service is an unnecessary daemon to have running on a server.
- ID
- xccdf_org.ssgproject.content_rule_package_setroubleshoot-plugins_removed
- Severity
- Low
- References
- Updated
Remediation - Puppet
include remove_setroubleshoot-plugins
class remove_setroubleshoot-plugins {
package { 'setroubleshoot-plugins':
ensure => 'purged',
}
Remediation - Shell Script
# Remediation is applicable only in certain platforms
if [ ! -f /.dockerenv ] && [ ! -f /run/.containerenv ]; then
# CAUTION: This remediation script will remove setroubleshoot-plugins
# from the system, and may remove any packages
# that depend on setroubleshoot-plugins. Execute this
Remediation - Anaconda Pre-Install Instructions
package --remove=setroubleshoot-plugins
Remediation - Ansible
- name: Ensure setroubleshoot-plugins is removed
package:
name: setroubleshoot-plugins
state: absent
when: ansible_virtualization_type not in ["docker", "lxc", "openvz", "podman", "container"]
tags: