Linux RHEL-10-200060
DISA STIG RHEL-10-200060 (CAT II): RHEL 10 must not have the unbound package installed.
DISA STIG recommends
RHEL-10-200060 CAT II
RHEL 10 must not have the unbound package installed.
NIST SP 800-53: CM-7
Check
Verify RHEL 10 does not have a DNS package installed with the following command: $ sudo dnf list --installed unbound Error: No matching Packages to list If the "unbound" package is installed, and the information system security officer lacks a documented requirement for a DNS, this is a finding.
Fix
Configure RHEL 10 to not have the unbound package installed with the following command: $ sudo dnf -y remove unbound
Our decision
Apply as published
No decision recorded: the recommendation stands. The owner signs in to change it.
All Linux decisions · The Linux baseline · The Linux test plan