Detections
Analytics

OL08-00-040010 - OL 8 must not install packages from the Extra Packages for Enterprise Linux (EPEL) repository.

Information

The EPEL is a repository of high-quality open-source packages for enterprise-class Linux distributions such as RHEL, CentOS, AlmaLinux, Rocky Linux, and Oracle Linux. These packages are not part of the official distribution but are built using the same Fedora build system to ensure compatibility and maintain quality standards.

Solution

Configure OL 8 to not be able to install packages from the EPEL.

Search for and remove any/all packages that came from the EPEL repo:

$ dnf repository-packages ol8_developer_EPEL remove

Remove the package that installs access to the EPEL repo:

$ dnf remove oracle-epel-release-el8

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_Oracle_Linux_8_V2R9_STIG.zip

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-7a., CAT|I, CCI|CCI-000381, Rule-ID|SV-248827r1208716_rule, STIG-ID|OL08-00-040010, Vuln-ID|V-248827

Plugin: Unix

Control ID: 91c1e538661ded9705e7a2e8d336186b07d21f2649d1775ab3ee82dd6d0027d1