← Back to Oracle Linux 8 Security Technical Implementation Guide

V-248905

CAT II (Medium)

OL 8 must not have the "iprutils" package installed if not required for operational support.

Rule ID

SV-248905r991589_rule

STIG

Oracle Linux 8 Security Technical Implementation Guide

Version

V2R8

CCIs

CCI-000366

Discussion

The "iprutils" package provides a suite of utilities to manage and configure IBM Power Linux RAID Adapters supported by the IPR SCSI storage device driver. Disabling the "iprutils" package protects the system against exploitation of any flaws in its implementation.

Check Content

Determine if the "iprutils" package is installed with the following command: 
 
$ sudo yum list installed iprutils 
 
If the "iprutils" package is installed, this is a finding.

Fix Text

Configure OL 8 to disable non-essential capabilities by removing the "iprutils" package from the system with the following command: 
 
$ sudo yum remove iprutils