Uninstall avahi-autoipd Server Package
An XCCDF Rule
Description
If the system does not need to have an Avahi server which implements the DNS Service Discovery and Multicast DNS protocols, the avahi-autoipd and avahi packages can be uninstalled.
Rationale
Automatic discovery of network services is not normally required for system functionality. It is recommended to remove this package to reduce the potential attack surface.
- ID
- xccdf_org.ssgproject.content_rule_package_avahi-autoipd_removed
- Severity
- Medium
- References
- Updated
Remediation - Shell Script
# CAUTION: This remediation script will remove avahi-autoipd
# from the system, and may remove any packages
# that depend on avahi-autoipd. Execute this
# remediation AFTER testing on a non-production
# system!
Remediation - Anaconda Pre-Install Instructions
package --remove=avahi-autoipd
Remediation - Ansible
- name: Ensure avahi-autoipd is removed
package:
name: avahi-autoipd
state: absent
tags:
- CCE-86516-2
Remediation - Puppet
include remove_avahi-autoipd
class remove_avahi-autoipd {
package { 'avahi-autoipd':
ensure => 'purged',
}