lowservicesunverifiedrollback-safe
Ensure dovecot is not installed
package-dovecot-removed · RHEL ≥ 8 · 2 impls
Description
The dovecot package provides IMAP and POP3 mail server functionality. Unless the system is a designated mail server, this package should not be installed.
Rationale
Mail servers are high-value targets for attackers. Unless specifically required, removing dovecot reduces the attack surface and eliminates potential mail-related vulnerabilities.
Check → Remediate
Checkpackage_state
- name:
- dovecot
- state:
- absent
Remediatepackage_absent
- name:
- dovecot
Framework references
NIST 800-53
CM-7
#package#mail#imap#pop3#dovecot#attack-surface