← Back to Cloud Linux AlmaLinux OS 9 Security Technical Implementation Guide

V-269340

CAT II (Medium)

AlmaLinux OS 9 must not have the gssproxy package installed.

Rule ID

SV-269340r1184101_rule

STIG

Cloud Linux AlmaLinux OS 9 Security Technical Implementation Guide

Version

V1R6

CCIs

CCI-000381

Discussion

The gssproxy package is a proxy for GSS API credential handling and could expose secrets on some networks. It is not needed for normal function of the OS.

Check Content

Verify that the gssproxy package is not installed with the following command:

Note: If NFS mounts are authorized and in use on the system, this is not applicable.

$ dnf list --installed gssproxy

Error: No matching Packages to list

If the "gssproxy" package is installed and is not documented with the information system security officer (ISSO) as an operational requirement, this is a finding.

Fix Text

Remove the gssproxy package with the following command:

$ dnf remove gssproxy