STIGhubSTIGhub
STIGsRMF ControlsCompare

STIGhub

A free tool to search and browse the entire DISA STIG library. Saves up to 75% in security compliance research time.

Navigation

  • Browse STIGs
  • Search
  • RMF Controls
  • Compare Versions

Resources

  • About
  • Release Notes
  • VPAT
  • DISA STIG Library
STIGs updated 4 hours ago
Powered by Pylon
© 2026 Beacon Cloud Solutions, Inc. All rights reserved.
← Back to Tri-Lab Operating System Stack (TOSS) 5 Security Technical Implementation Guide

V-282611

CAT III (Low)

TOSS 5 must remove all software components after updated versions have been installed.

Rule ID

SV-282611r1200813_rule

STIG

Tri-Lab Operating System Stack (TOSS) 5 Security Technical Implementation Guide

Version

V1R1

CCIs

CCI-002617

Discussion

Previous versions of software components that are not removed from the information system after updates have been installed may be exploited by adversaries.

Check Content

Verify TOSS 5 removes all software components after updated versions have been installed using the following command:

$ grep clean /etc/dnf/dnf.conf 

clean_requirements_on_remove=1 

If "clean_requirements_on_remove" is not set to "1", this is a finding.

Fix Text

Configure TOSS 5 to remove all software components after updated versions have been installed.

Edit the file /etc/dnf/dnf.conf by adding or editing the following line:

clean_requirements_on_remove=1