Skip to content
ATO Pathways
  Log In

Uninstall setroubleshoot-plugins Package

An XCCDF Rule

Description

The SETroubleshoot plugins are used to analyze SELinux AVC data. The service provides information around configuration errors, unauthorized intrusions, and other potential errors. The setroubleshoot-plugins package can be removed with the following command: 

$ sudo yum erase setroubleshoot-plugins

Rationale

The SETroubleshoot service is an unnecessary daemon to have running on a server.

ID
xccdf_org.ssgproject.content_rule_package_setroubleshoot-plugins_removed
Severity
Low
References
Updated



Remediation - script:kickstart


package remove setroubleshoot-plugins

Remediation - script:bootc


dnf remove setroubleshoot-plugins

Remediation - Puppet

include remove_setroubleshoot-plugins

class remove_setroubleshoot-plugins {
  package { 'setroubleshoot-plugins':
    ensure => 'purged',
  }

Remediation - Ansible

- name: Gather the package facts
  package_facts:
    manager: auto
  tags:
  - CCE-84250-0
  - disable_strategy

Remediation - Anaconda Pre-Install Instructions


package --remove=setroubleshoot-plugins

Remediation - Shell Script

# Remediation is applicable only in certain platforms
if rpm --quiet -q kernel; then

# CAUTION: This remediation script will remove setroubleshoot-plugins
#	   from the system, and may remove any packages
#	   that depend on setroubleshoot-plugins. Execute this