lowservicesunverifiedrollback-safe
Ensure net-snmp is not installed
package-net-snmp-removed · RHEL ≥ 8 · 2 impls
Description
The net-snmp package provides SNMP agent functionality. Unless SNMP monitoring is specifically required and properly secured, this package should not be installed.
Rationale
SNMP can expose sensitive system information and has had security vulnerabilities. If not required for monitoring, removing it reduces the attack surface.
Check → Remediate
Checkpackage_state
- name:
- net-snmp
- state:
- absent
Remediatepackage_absent
- name:
- net-snmp
Framework references
NIST 800-53
CM-7
#package#snmp#monitoring#attack-surface