Skip to content
ATO Pathways
  Log In

Uninstall krb5-workstation Package

An XCCDF Rule

Description

The krb5-workstation package can be removed with the following command: 

$ sudo yum erase krb5-workstation

warning alert: Warning

This rule is disabled on Red Hat Virtualization Hosts and Managers, it will report not applicable. RHV hosts require ipa-client package, which has dependency on krb5-workstation.

Rationale

Kerberos is a network authentication system. The krb5-workstation package contains the basic Kerberos programs (kinit, klist, kdestroy, kpasswd).

ID
xccdf_org.ssgproject.content_rule_package_krb5-workstation_removed
Severity
Medium
References
Updated



Remediation - Anaconda Pre-Install Instructions


package --remove=krb5-workstation

Remediation - Ansible

- name: Ensure krb5-workstation is removed
  package:
    name: krb5-workstation
    state: absent
  tags:
  - DISA-STIG-RHEL-08-010162

Remediation - Puppet

include remove_krb5-workstation

class remove_krb5-workstation {
  package { 'krb5-workstation':
    ensure => 'purged',
  }

Remediation - Shell Script


# CAUTION: This remediation script will remove krb5-workstation
#	   from the system, and may remove any packages
#	   that depend on krb5-workstation. Execute this
#	   remediation AFTER testing on a non-production
#	   system!