lowservicesunverifiedrollback-safe
Ensure cyrus-imapd is not installed
package-cyrus-imapd-removed · RHEL ≥ 8 · 2 impls
Description
The cyrus-imapd package provides IMAP mail server functionality. Unless the system is a designated mail server, this package should not be installed.
Rationale
IMAP servers provide network-accessible mail services and have been targets of security vulnerabilities. Removing unnecessary mail server software reduces the attack surface.
Check → Remediate
Checkpackage_state
- name:
- cyrus-imapd
- state:
- absent
Remediatepackage_absent
- name:
- cyrus-imapd
Framework references
NIST 800-53
CM-7
#package#mail#imap#cyrus#attack-surface