← Rules Catalog
mediumservicesverified rollback-safe

Ensure nfs-utils package is not installed

pkg-nfs-utils-absent · UBUNTU ≥ 22, RHEL ≥ 8 · 2 impls

Description

The nfs-utils package must not be installed unless NFS is required. NFS can expose sensitive data if not properly secured.

Rationale

Removing NFS when not required reduces the attack surface and eliminates risk of misconfigured network shares.

Check → Remediate

Checkpackage_state
name:
nfs-utils
state:
absent
Remediatepackage_absent
name:
nfs-utils

Framework references

STIG

V-280943 / RHEL-10-200010V-257828 / RHEL-09-215025V-279938 / UBTU-24-100050V-279937 / UBTU-22-215040

NIST 800-53

CM-7

Live verification

rhel9:checkubuntu22:checkubuntu24:checkubuntu26:check
#package#nfs#attack-surface