AlmaLinux OS 9 must not have the gssproxy package installed.

The gssproxy package is a proxy for GSS API credential handling and could expose secrets on some networks. It is not needed for normal function of the OS.

Verify that the gssproxy package is not installed with the following command:

Note: If NFS mounts are authorized and in use on the system, this is not applicable.

$ dnf list --installed gssproxy

Error: No matching Packages to list

If the "gssproxy" package is installed and is not documented with the information system security officer (ISSO) as an operational requirement, this is a finding.

Remove the gssproxy package with the following command:

$ dnf remove gssproxy