Uninstall rsync Package
An XCCDF Rule
Description
The rsyncd service can be used to synchronize files between systems over network links. Thersync-daemon
package can be removed with the following command:
$ sudo yum erase rsync-daemon
Rationale
The rsyncd service presents a security risk as it uses unencrypted protocols for communication.
- ID
- xccdf_org.ssgproject.content_rule_package_rsync_removed
- Severity
- Medium
- References
- Updated
Remediation Templates
A Puppet Snippet
include remove_rsync-daemon
class remove_rsync-daemon {
package { 'rsync-daemon':
ensure => 'purged',
}
}
An Ansible Snippet
- name: Ensure rsync-daemon is removed
package:
name: rsync-daemon
state: absent
tags:
- CCE-86335-7
script:kickstart
package remove rsync-daemon
script:bootc
dnf remove rsync-daemon
Anaconda Pre-Install Instructions
package --remove=rsync-daemon
A Shell Script
# CAUTION: This remediation script will remove rsync-daemon
# from the system, and may remove any packages
# that depend on rsync-daemon. Execute this
# remediation AFTER testing on a non-production
# system!