OL 8 must not have the "iprutils" package installed if not required for operational support.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-248905	OL08-00-040380	SV-248905r991589_rule		Medium

Description

The "iprutils" package provides a suite of utilities to manage and configure IBM Power Linux RAID Adapters supported by the IPR SCSI storage device driver. Disabling the "iprutils" package protects the system against exploitation of any flaws in its implementation.

STIG	Date
Oracle Linux 8 Security Technical Implementation Guide	2024-12-03

Details

Check Text (C-52339r780279_chk)

Determine if the "iprutils" package is installed with the following command:

$ sudo yum list installed iprutils

If the "iprutils" package is installed, this is a finding.

Fix Text (F-52293r780280_fix)

Configure OL 8 to disable non-essential capabilities by removing the "iprutils" package from the system with the following command:

$ sudo yum remove iprutils