mediumservicesverified ✓rollback-safe
Ensure sendmail package is not installed
pkg-sendmail-absent · RHEL ≥ 8 · 2 impls
Description
The sendmail MTA package must not be installed. Postfix is the preferred mail transfer agent for RHEL 9 systems.
Rationale
Using a single MTA reduces complexity and attack surface. Sendmail has a complex configuration and historical security issues.
Check → Remediate
Checkpackage_state
- name:
- sendmail
- state:
- absent
Remediatepackage_absent
- name:
- sendmail
Framework references
STIG
V-257827 / RHEL-09-215020V-230489
NIST 800-53
CM-7
Live verification
rhel8:checkrhel9:check
#package#mail#attack-surface