Detections
Analytics

1.27 OL09-00-000105

Information

OL 9 must not install packages from the Extra Packages for Enterprise Linux (EPEL) repository.

GROUP ID: V-271457
RULE ID: SV-271457r1134853

The EPEL is a repository of high-quality open-source packages for enterprise-class Linux distributions such as RHEL, CentOS, AlmaLinux, Rocky Linux, and Oracle Linux. These packages are not part of the official distribution but are built using the same Fedora build system to ensure compatibility and maintain quality standards.

Solution

The repo package can be manually removed with the following command:

$ sudo dnf remove epel-release

Configure the operating system to disable use of the EPEL repository with the following command:

$ sudo dnf config-manager --set-disabled epel

See Also

https://workbench.cisecurity.org/benchmarks/27024

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-7, 800-53|CM-7a., CCI|CCI-000381, Rule-ID|SV-271457r1134853_rule, STIG-ID|OL09-00-000105, Vuln-ID|V-271457

Plugin: Unix

Control ID: 04fae0dd2495fe1cf7aaee0bfc7ecee8ba33929ea6aeee6bc5b646256ddee83d