OL 9 must not have the sendmail package installed.

Overview

Finding IDVersionRule IDIA ControlsSeverity
V-271466OL09-00-000150SV-271466r1091110_ruleCCI-000381medium
Description
The sendmail software was not developed with security in mind, and its design prevents it from being effectively contained by SELinux. Postfix must be used instead.
STIGDate
Oracle Linux 9 Security Technical Implementation Guide2025-05-08

Related Frameworks

3 paths across 3 frameworks
NIST 800-531 mapping
CM-7
1.00
  • DISA · 1 · disa_xccdf · related
  • DISA · 2025-01-23 · disa_cci_list · equivalent
NIST 800-1711 mapping
3.4.6
1.00
  • DISA · 1 · disa_xccdf · related
  • DISA · 2025-01-23 · disa_cci_list · equivalent
  • NIST · Rev 2 (Feb 2020, errata Jan 2021) · nist_800_171_app_d · equivalent
CCI1 mapping
CCI-000381
1.00
  • DISA · 1 · disa_xccdf · related

Details

Check Text (C-271466r1091110_chk)

Verify that OL 9 does not have the sendmail package installed with the following command: $ dnf list --installed sendmail Error: No matching Packages to list If the "sendmail" package is installed, this is a finding.

Fix Text (F-75423r1091109_fix)

Remove the sendmail package with the following command: $ sudo dnf remove sendmail