lowservicesverified ✓rollback-safe
Ensure gssproxy package is not installed
pkg-gssproxy-absent · RHEL ≥ 8 · 2 impls
Description
The gssproxy package must not be installed unless required for Kerberos authentication. It provides GSS-API proxy services.
Rationale
Removing unnecessary Kerberos-related packages reduces the attack surface when Kerberos is not in use.
Check → Remediate
Checkpackage_state
- name:
- gssproxy
- state:
- absent
Remediatepackage_absent
- name:
- gssproxy
Framework references
STIG
V-280945 / RHEL-10-200030V-257832 / RHEL-09-215045V-230559
NIST 800-53
CM-7
Live verification
rhel8:checkrhel9:check
#package#kerberos#attack-surface