A production OHS Installation must prohibit the installation of a compiler.
An XCCDF Rule
Description
The presence of a compiler on a production server facilitates the malicious user’s task of creating custom versions of programs and installing Trojan Horses or viruses. For example, the attacker’s code can be uploaded and compiled on the server under attack.
- ID
- SV-221446r879887_rule
- Version
- OH12-1X-000208
- Severity
- Medium
- References
- Updated
Remediation Templates
A Manual Procedure
Ask the System Administrator to remove any compilers installed on the system.