mediumservicesverified ✓rollback-safe
Ensure krb5-workstation package is not installed
pkg-krb5-workstation-absent · RHEL ≥ 8 · 2 impls
Description
The krb5-workstation package provides Kerberos client utilities. Unless required for authentication, this package should not be installed.
Rationale
Removing unnecessary packages reduces the attack surface and potential vulnerabilities.
Check → Remediate
Checkpackage_state
- name:
- krb5-workstation
- state:
- absent
Remediatepackage_absent
- name:
- krb5-workstation
Framework references
STIG
V-230239
NIST 800-53
CM-7AC-6
Live verification
rhel8:checkrhel9:check
#package#kerberos#attack-surface