Detections
Analytics
OL09-00-000105 - OL 9 must not install packages from the Extra Packages for Enterprise Linux (EPEL) repository.
Information
The EPEL is a repository of high-quality open-source packages for enterprise-class Linux distributions such as RHEL, CentOS, AlmaLinux, Rocky Linux, and Oracle Linux. These packages are not part of the official distribution but are built using the same Fedora build system to ensure compatibility and maintain quality standards.Solution
Configure OL 9 to not be able to install packages from the EPEL.Search for and remove any/all packages that came from the EPEL repo:
$ dnf repository-packages ol9_developer_EPEL remove
Remove the package that installs access to the EPEL repo:
$ dnf remove oracle-epel-release-el9
See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_Oracle_Linux_9_V1R6_STIG.zip
Item Details
Audit Name: DISA Oracle Linux 9 STIG v1r6
Category: CONFIGURATION MANAGEMENT
References: 800-53|CM-7a., CAT|II, CCI|CCI-000381, Rule-ID|SV-271457r1208721_rule, STIG-ID|OL09-00-000105, Vuln-ID|V-271457
Plugin: Unix
Control ID: 7753ec9b535bbc7a1f34cb63f75bf427bbbc5f328ba676ee2594b96a07b7859c