Uninstall openldap-servers Package
An XCCDF Rule
Description
The openldap2 package is not installed by default on a SUSE Linux Enterprise 15 system. It is needed only by the OpenLDAP server, not by the clients which use LDAP for authentication. If the system is not intended for use as an LDAP Server it should be removed.
Rationale
Unnecessary packages should not be installed to decrease the attack surface of the system. While this software is clearly essential on an LDAP server, it is not necessary on typical desktop or workstation systems.
- ID
- xccdf_org.ssgproject.content_rule_package_openldap-servers_removed
- Severity
- Low
- References
- Updated
Remediation - Ansible
- name: Ensure openldap2 is removed
package:
name: openldap2
state: absent
tags:
- CCE-91283-2
Remediation - Puppet
include remove_openldap2
class remove_openldap2 {
package { 'openldap2':
ensure => 'purged',
}
Remediation - Shell Script
# CAUTION: This remediation script will remove openldap2
# from the system, and may remove any packages
# that depend on openldap2. Execute this
# remediation AFTER testing on a non-production
# system!