mediumservicesverified ✓rollback-safe
Ensure tuned package is not installed
pkg-tuned-absent · RHEL ≥ 8 · 2 impls
Description
The tuned package must not be installed unless required for performance tuning. It provides system tuning capabilities.
Rationale
The tuned service can modify system settings in ways that may conflict with security hardening configurations.
Check → Remediate
Checkpackage_state
- name:
- tuned
- state:
- absent
Remediatepackage_absent
- name:
- tuned
Framework references
STIG
V-280946 / RHEL-10-200040V-257834 / RHEL-09-215055V-230561
NIST 800-53
CM-7
Live verification
rhel8:checkrhel9:check
#package#tuning#attack-surface