Detections
Analytics

1.3.1.8 Ensure SETroubleshoot is not installed

Warning! Audit Deprecated

This audit has been deprecated and will be removed in a future update.

View Next Audit Version

Information

The SETroubleshoot service notifies desktop users of SELinux denials through a user-friendly interface. The service provides important information around configuration errors, unauthorized intrusions, and other potential errors.

The SETroubleshoot service is an unnecessary daemon to have running on a server, especially if X Windows is disabled.

Solution

Run the following command to uninstall setroubleshoot :

# dnf remove setroubleshoot

See Also

https://workbench.cisecurity.org/benchmarks/18208

Item Details

References: CSCv7|14.6

Plugin: Unix

Control ID: 85a588c66c2a872ba8aa1001313d3f7d54490a23f1c51b6783f9d4ef57841dbd