BaselineWatch
Apply as published
Desk

Linux RHEL-10-200060

DISA STIG RHEL-10-200060 (CAT II): RHEL 10 must not have the unbound package installed.

DISA STIG recommends

RHEL-10-200060 CAT II

RHEL 10 must not have the unbound package installed.

NIST SP 800-53: CM-7

Check

Verify RHEL 10 does not have a DNS package installed with the following command: $ sudo dnf list --installed unbound Error: No matching Packages to list If the "unbound" package is installed, and the information system security officer lacks a documented requirement for a DNS, this is a finding.

Fix

Configure RHEL 10 to not have the unbound package installed with the following command: $ sudo dnf -y remove unbound

Our decision

Apply as published

No decision recorded: the recommendation stands. The owner signs in to change it.

All Linux decisions · The Linux baseline · The Linux test plan