1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
|
documentation_complete: true
# new major OS versions will most likely not be applicable because of the
# kerberos version higher than 1.17-18
title: 'Uninstall krb5-workstation Package'
description: |-
{{{ describe_package_remove(package="krb5-workstation") }}}
rationale: |-
Kerberos is a network authentication system. The <tt>krb5-workstation</tt> package contains the basic
Kerberos programs (<tt>kinit</tt>, <tt>klist</tt>, <tt>kdestroy</tt>, <tt>kpasswd</tt>).
severity: medium
identifiers:
cce@rhel8: CCE-82931-7
cce@rhel9: CCE-83520-7
references:
srg: SRG-OS-000095-GPOS-00049,SRG-OS-000120-GPOS-00061
stigid@ol8: OL08-00-010162
platforms:
{{%- if "rhel" in product %}}
- no_ovirt and krb5_workstation_older_than_1_17-18
{{%- else %}}
- krb5_workstation_older_than_1_17-18
{{%- endif %}}
warnings:
{{{ warning_ovirt_rule_notapplicable("RHV hosts require ipa-client package, which has dependency on krb5-workstation") | indent(4) }}}
{{{ complete_ocil_entry_package(package="krb5-workstation") }}}
template:
name: package_removed
vars:
pkgname: krb5-workstation
fixtext: |-
{{{ describe_package_remove(package="krb5-workstation") }}}
srg_requirement:
The krb5-workstation package must not be installed on {{{ full_name }}}.
|
