mediumservicesverified ✓rollback-safe
Ensure nfs-utils package is not installed
pkg-nfs-utils-absent · UBUNTU ≥ 22, RHEL ≥ 8 · 2 impls
Description
The nfs-utils package must not be installed unless NFS is required. NFS can expose sensitive data if not properly secured.
Rationale
Removing NFS when not required reduces the attack surface and eliminates risk of misconfigured network shares.
Check → Remediate
Checkpackage_state
- name:
- nfs-utils
- state:
- absent
Remediatepackage_absent
- name:
- nfs-utils
Framework references
STIG
V-280943 / RHEL-10-200010V-257828 / RHEL-09-215025V-279938 / UBTU-24-100050V-279937 / UBTU-22-215040
NIST 800-53
CM-7
Live verification
rhel9:checkubuntu22:checkubuntu24:checkubuntu26:check
#package#nfs#attack-surface