← Rules Catalog
lowservicesunverifiedrollback-safe

Ensure cyrus-imapd is not installed

package-cyrus-imapd-removed · RHEL ≥ 8 · 2 impls

Description

The cyrus-imapd package provides IMAP mail server functionality. Unless the system is a designated mail server, this package should not be installed.

Rationale

IMAP servers provide network-accessible mail services and have been targets of security vulnerabilities. Removing unnecessary mail server software reduces the attack surface.

Check → Remediate

Checkpackage_state
name:
cyrus-imapd
state:
absent
Remediatepackage_absent
name:
cyrus-imapd

Framework references

NIST 800-53

CM-7
#package#mail#imap#cyrus#attack-surface