ALMA-09-029500 - AlmaLinux OS 9 must not have the gssproxy package installed.

Information

The gssproxy package is a proxy for GSS API credential handling and could expose secrets on some networks. It is not needed for normal function of the OS.

Solution

Remove the gssproxy package with the following command:

$ dnf remove gssproxy

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_CL_AlmaLinux_OS_9_V1R2_STIG.zip

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-7a., CAT|II, CCI|CCI-000381, Rule-ID|SV-269340r1050222_rule, STIG-ID|ALMA-09-029500, Vuln-ID|V-269340

Plugin: Unix

Control ID: ac8b487ed854e1f2c34bf28c9bd0036b5956b2272304875dd6a548aa29262a7e