Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-38671 | RHEL-06-000288 | SV-50472r1_rule | Medium |
Description |
---|
The sendmail software was not developed with security in mind and its design prevents it from being effectively contained by SELinux. Postfix should be used instead. |
STIG | Date |
---|---|
Red Hat Enterprise Linux 6 Security Technical Implementation Guide | 2018-03-01 |
Check Text ( C-46231r1_chk ) |
---|
Run the following command to determine if the "sendmail" package is installed: # rpm -q sendmail If the package is installed, this is a finding. |
Fix Text (F-43620r1_fix) |
---|
Sendmail is not the default mail transfer agent and is not installed by default. The "sendmail" package can be removed with the following command: # yum erase sendmail |