1.371 OL08-00-040380

Information

OL 8 must not have the "iprutils" package installed if not required for operational support.

GROUP ID: V-248905RULE ID: SV-248905r991589

The "iprutils" package provides a suite of utilities to manage and configure IBM Power Linux RAID Adapters supported by the IPR SCSI storage device driver. Disabling the "iprutils" package protects the system against exploitation of any flaws in its implementation.

Solution

Configure OL 8 to disable non-essential capabilities by removing the "iprutils" package from the system with the following command:

$ sudo yum remove iprutils

See Also

https://workbench.cisecurity.org/benchmarks/23791