Uninstall setroubleshoot Package
An XCCDF Rule
Description
The SETroubleshoot service notifies desktop users of SELinux
denials. The service provides information around configuration errors,
unauthorized intrusions, and other potential errors.
The setroubleshoot package can be removed with the following command:
$ sudo yum erase setroubleshoot
Rationale
The SETroubleshoot service is an unnecessary daemon to have running on a server, especially if X Windows is removed or disabled.
- ID
- xccdf_org.ssgproject.content_rule_package_setroubleshoot_removed
- Severity
- Low
- References
- Updated
Remediation - Puppet
include remove_setroubleshoot
class remove_setroubleshoot {
package { 'setroubleshoot':
ensure => 'purged',
}
Remediation - Ansible
- name: Gather the package facts
package_facts:
manager: auto
tags:
- CCE-82755-0
- disable_strategy
Remediation - script:kickstart
package remove setroubleshoot
Remediation - script:bootc
dnf remove setroubleshoot
Remediation - Shell Script
# Remediation is applicable only in certain platforms
if rpm --quiet -q kernel; then
# CAUTION: This remediation script will remove setroubleshoot
# from the system, and may remove any packages
# that depend on setroubleshoot. Execute this
Remediation - Anaconda Pre-Install Instructions
package --remove=setroubleshoot