lowservicesunverifiedrollback-safe
Ensure nginx is not installed
package-nginx-removed · RHEL ≥ 8 · 2 impls
Description
The nginx package provides web server functionality. Unless the system is a designated web server, this package should not be installed.
Rationale
Web servers are high-profile targets for attacks. Installing nginx when not needed increases the attack surface and may expose the system to web-related vulnerabilities.
Check → Remediate
Checkpackage_state
- name:
- nginx
- state:
- absent
Remediatepackage_absent
- name:
- nginx
Framework references
NIST 800-53
CM-7
#package#web#nginx#attack-surface