AlmaLinux OS 9 must not have the gssproxy package installed.

Overview

Finding IDVersionRule IDIA ControlsSeverity
V-269340ALMA-09-029500SV-269340r1050222_ruleCCI-000381medium
Description
The gssproxy package is a proxy for GSS API credential handling and could expose secrets on some networks. It is not needed for normal function of the OS.
STIGDate
CloudLinux AlmaLinux OS 9 Security Technical Implementation Guide2025-05-22

Details

Check Text (C-269340r1050222_chk)

Verify that the gssproxy package is not installed with the following command: $ dnf list --installed gssproxy Error: No matching Packages to list If the "gssproxy" package is installed and is not documented with the information system security officer (ISSO) as an operational requirement, this is a finding.

Fix Text (F-73272r1048397_fix)

Remove the gssproxy package with the following command: $ dnf remove gssproxy