lowservicesunverifiedrollback-safe
Ensure dnsmasq is not installed
package-dnsmasq-removed · RHEL ≥ 8 · 2 impls
Description
The dnsmasq package provides DNS, DHCP, and TFTP services. Unless specifically required, this package should not be installed.
Rationale
Dnsmasq provides multiple network services that increase the attack surface. Each service has its own potential vulnerabilities. Remove unless specifically required for the system's role.
Check → Remediate
Checkpackage_state
- name:
- dnsmasq
- state:
- absent
Remediatepackage_absent
- name:
- dnsmasq
Framework references
NIST 800-53
CM-7
#package#dns#dhcp#dnsmasq#attack-surface