← Back to Oracle Linux 9 Security Technical Implementation Guide

V-271522

CAT III (Low)

OL 9 must remove all software components after updated versions have been installed.

Rule ID

SV-271522r1091278_rule

STIG

Oracle Linux 9 Security Technical Implementation Guide

Version

V1R5

CCIs

CCI-002617

Discussion

Previous versions of software components that are not removed from the information system after updates have been installed may be exploited by some adversaries.

Check Content

Verify that OL 9 removes all software components after updated versions have been installed with the following command:

$ grep clean /etc/dnf/dnf.conf 
clean_requirements_on_remove=True 

If clean_requirements_on_remove is not set to "True", this is a finding.

Fix Text

Configure OL 9 to remove all software components after updated versions have been installed.

Edit the file /etc/dnf/dnf.conf by adding or editing the following line:

 clean_requirements_on_remove=1