lowservicesverified ✓rollback-safe
Ensure LDAP client is not installed
package-openldap-clients-removed · RHEL ≥ 8 · 2 impls
Description
The openldap-clients package should not be installed unless the system requires LDAP client functionality for directory services.
Rationale
Unless the system authenticates against an LDAP directory, the LDAP client tools are not needed and increase the attack surface.
Check → Remediate
Checkpackage_state
- name:
- openldap-clients
- state:
- absent
Remediatepackage_absent
- name:
- openldap-clients
Framework references
CIS
rhel9 2.2.2rhel8 2.2.2rhel10 2.2.2
NIST 800-53
CM-7
Live verification
rhel10:checkrhel8:checkrhel9:check
#package#ldap#client#attack-surface