Skip to content
Log In

Uninstall setroubleshoot Package

An XCCDF Rule

Description

The SETroubleshoot service notifies desktop users of SELinux denials. The service provides information around configuration errors, unauthorized intrusions, and other potential errors. The setroubleshoot package can be removed with the following command: 
$ sudo yum erase setroubleshoot

Rationale

The SETroubleshoot service is an unnecessary daemon to have running on a server, especially if X Windows is removed or disabled.

ID
xccdf_org.ssgproject.content_rule_package_setroubleshoot_removed
Severity
Low
References
Updated

Remediation Templates

A Shell Script

# Remediation is applicable only in certain platforms
if rpm --quiet -q kernel; then
# CAUTION: This remediation script will remove setroubleshoot
#	   from the system, and may remove any packages
#	   that depend on setroubleshoot. Execute this
#	   remediation AFTER testing on a non-production

A Puppet Snippet

include remove_setroubleshoot
class remove_setroubleshoot {
  package { 'setroubleshoot':
    ensure => 'purged',
  }
}

An Ansible Snippet

- name: Gather the package facts
  package_facts:
    manager: auto
  tags:
  - CCE-82755-0
  - disable_strategy

script:kickstart

package remove setroubleshoot

script:bootc

dnf remove setroubleshoot

Anaconda Pre-Install Instructions

package --remove=setroubleshoot