2.2.13 Ensure HTTP Proxy Server is not installed

Information

Squid is a standard proxy server used in many distributions and environments.

Unless a system is specifically set up to act as a proxy server, it is recommended that the squid package be removed to reduce the potential attack surface.

Note: Several HTTP proxy servers exist. These should be checked and removed unless required.

Solution

Run the following command to remove the squid package:

# dnf remove squid

See Also

https://workbench.cisecurity.org/files/3742

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6, 800-53|CM-7, CSCv7|9.2

Plugin: Unix

Control ID: 71d324247aa31df95494265e393f62510194f0dac0deefcda96af4ae2e05967c