Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-38627 | RHEL-06-000256 | SV-50428r2_rule | Low |
Description |
---|
Unnecessary packages should not be installed to decrease the attack surface of the system. |
STIG | Date |
---|---|
Red Hat Enterprise Linux 6 Security Technical Implementation Guide | 2017-04-28 |
Check Text ( None ) |
---|
None |
Fix Text (F-43577r2_fix) |
---|
The "openldap-servers" package should be removed if not in use. # yum erase openldap-servers The openldap-servers RPM is not installed by default on RHEL6 machines. It is needed only by the OpenLDAP server, not by the clients which use LDAP for authentication. If the system is not intended for use as an LDAP Server it should be removed. |