1.7.1.6 Ensure SETroubleshoot is not installed

Information

The SETroubleshoot service notifies desktop users of SELinux denials through a user- friendly interface. The service provides important information around configuration errors, unauthorized intrusions, and other potential errors. The SETroubleshoot service is an unnecessary daemon to have running on a server, especially if X Windows is disabled.

Solution

Run the following command to uninstall setroubleshoot: # dnf remove setroubleshoot

See Also

https://workbench.cisecurity.org/files/2608

Item Details

Category: ACCESS CONTROL

References: 800-53|AC-3, CSCv7|14.6

Plugin: Unix

Control ID: d95b1f326efe753cff767f79b5b60a8ee78a2727003a6cffe272a76d1d0cf8c5