UCF STIG Viewer Logo
Changes are coming to https://stigviewer.com. Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey

RHEL 9 must remove all software components after updated versions have been installed.


Overview

Finding ID Version Rule ID IA Controls Severity
V-257824 RHEL-09-214035 SV-257824r958936_rule Low
Description
Previous versions of software components that are not removed from the information system after updates have been installed may be exploited by some adversaries.
STIG Date
Red Hat Enterprise Linux 9 Security Technical Implementation Guide 2024-06-04

Details

Check Text ( C-61565r925457_chk )
Verify RHEL 9 removes all software components after updated versions have been installed with the following command:

$ grep clean /etc/dnf/dnf.conf

clean_requirements_on_remove=1

If "clean_requirements_on_remove" is not set to "1", this is a finding.
Fix Text (F-61489r925458_fix)
Configure RHEL 9 to remove all software components after updated versions have been installed.

Edit the file /etc/dnf/dnf.conf by adding or editing the following line:

clean_requirements_on_remove=1