mediumservicesverified ✓rollback-safe
Ensure quagga package is not installed
pkg-quagga-absent · RHEL ≥ 8 · 2 impls
Description
The quagga routing software package must not be installed unless required for routing functionality.
Rationale
Routing daemons are rarely needed on general-purpose servers and increase the attack surface if installed unnecessarily.
Check → Remediate
Checkpackage_state
- name:
- quagga
- state:
- absent
Remediatepackage_absent
- name:
- quagga
Framework references
STIG
V-257836
NIST 800-53
CM-7
Live verification
rhel9:check
#package#routing#attack-surface