Detections
Analytics

1.14 RHEL-10-200000

Information

RHEL 10 must remove all software components after updated versions have been installed.

GROUP ID: V-280942RULE ID: SV-280942r1165181

Previous versions of software components that are not removed from the information system after updates have been installed may be exploited by some adversaries.

Solution

Configure RHEL 10 to remove all software components after updated versions have been installed.

Edit the file "/etc/dnf/dnf.conf" by adding or editing the following line:

clean_requirements_on_remove=True

See Also

https://workbench.cisecurity.org/benchmarks/26403

Item Details

Category: SYSTEM AND INFORMATION INTEGRITY

References: 800-53|SI-2(6), CAT|II, CCI|CCI-002617, Rule-ID|SV-280942r1165181_rule, STIG-ID|RHEL-10-200000, Vuln-ID|V-280942

Plugin: Unix

Control ID: b2f501cab90950fb07ab113730bcfe9fdc7c16aa2ce9fa3edb79fe61028763fc