File: rule.yml

package info (click to toggle)
scap-security-guide 0.1.76-1
  • links: PTS, VCS
  • area: main
  • in suites: trixie
  • size: 110,644 kB
  • sloc: xml: 241,883; sh: 73,777; python: 32,527; makefile: 27
file content (28 lines) | stat: -rw-r--r-- 740 bytes parent folder | download | duplicates (2)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
documentation_complete: true

title: 'Uninstall dnsmasq Package'

description: |-
    dnsmasq is a lightweight tool that provides DNS caching, DNS forwarding and
    DHCP (Dynamic Host Configuration Protocol) services.
    <br />
    {{{ describe_package_remove(package="dnsmasq") }}}

rationale: |-
    Unless a system is specifically designated to act as a DNS
    caching, DNS forwarding and/or DHCP server, it is recommended that the
    package be removed to reduce the potential attack surface.

severity: low

identifiers:
    cce@rhel8: CCE-90746-9
    cce@rhel9: CCE-86063-5
    cce@rhel10: CCE-86558-4

{{{ complete_ocil_entry_package(package="dnsmasq") }}}

template:
    name: package_removed
    vars:
        pkgname: dnsmasq