Detections
Analytics

1.87 OL09-00-000495

Information

OL 9 must remove all software components after updated versions have been installed.

GROUP ID: V-271522
RULE ID: SV-271522r1091278

Previous versions of software components that are not removed from the information system after updates have been installed may be exploited by some adversaries.

Solution

Configure OL 9 to remove all software components after updated versions have been installed.

Edit the file /etc/dnf/dnf.conf by adding or editing the following line:

clean_requirements_on_remove=1

See Also

https://workbench.cisecurity.org/benchmarks/27024

Item Details

Category: SYSTEM AND INFORMATION INTEGRITY

References: 800-53|SI-2(6), CCI|CCI-002617, Rule-ID|SV-271522r1091278_rule, STIG-ID|OL09-00-000495, Vuln-ID|V-271522

Plugin: Unix

Control ID: fec88b82626a0f0623e29ea0104e5865d770ef20c2cfd2f7fe35778604fbd797