Detections
Analytics

1.345 ALMA-09-045120

Information

AlmaLinux OS 9 must remove all software components after updated versions have been installed.

GROUP ID: V-269453
RULE ID: SV-269453r1050336

Previous versions of software components that are not removed from the information system after updates have been installed may be exploited by some adversaries.

Solution

Configure AlmaLinux OS 9 to remove all software components after updated versions have been installed.

Run the following command to change the configuration of DNF:

$ dnf config-manager --setopt clean_requirements_on_remove=1 --save

See Also

https://workbench.cisecurity.org/benchmarks/27039

Item Details

Category: SYSTEM AND INFORMATION INTEGRITY

References: 800-53|SI-2(6), CCI|CCI-002617, Rule-ID|SV-269453r1050336_rule, STIG-ID|ALMA-09-045120, Vuln-ID|V-269453

Plugin: Unix

Control ID: 5eff6d4a3f0b202b21c68ed9618fd7b35692f35bb01ddd16b2b34f4c38134dc1