Skip to content
ATO Pathways
  Log In

Uninstall dnsmasq Package

An XCCDF Rule

Description

dnsmasq is a lightweight tool that provides DNS caching, DNS forwarding and DHCP (Dynamic Host Configuration Protocol) services.
The dnsmasq package can be removed with the following command: 

$ sudo dnf erase dnsmasq

Rationale

Unless a system is specifically designated to act as a DNS caching, DNS forwarding and/or DHCP server, it is recommended that the package be removed to reduce the potential attack surface.

ID
xccdf_org.ssgproject.content_rule_package_dnsmasq_removed
Severity
Low
References
Updated



Remediation - Anaconda Pre-Install Instructions


package --remove=dnsmasq

Remediation - Ansible

- name: Ensure dnsmasq is removed
  package:
    name: dnsmasq
    state: absent
  tags:
  - CCE-86063-5

Remediation - Puppet

include remove_dnsmasq

class remove_dnsmasq {
  package { 'dnsmasq':
    ensure => 'purged',
  }

Remediation - Shell Script


# CAUTION: This remediation script will remove dnsmasq
#	   from the system, and may remove any packages
#	   that depend on dnsmasq. Execute this
#	   remediation AFTER testing on a non-production
#	   system!