AlmaLinux OS 9 must not have the gssproxy package installed.
Severity | Group ID | Group Title | Version | Rule ID | Date | STIG Version |
|---|---|---|---|---|---|---|
| medium | V-269340 | SRG-OS-000095-GPOS-00049 | ALMA-09-029500 | SV-269340r1184101_rule | 2026-02-27 | 1 |
Description
The gssproxy package is a proxy for GSS API credential handling and could expose secrets on some networks. It is not needed for normal function of the OS.
ℹ️ Check
Verify that the gssproxy package is not installed with the following command:
Note: If NFS mounts are authorized and in use on the system, this is not applicable.
$ dnf list --installed gssproxy
Error: No matching Packages to list
If the "gssproxy" package is installed and is not documented with the information system security officer (ISSO) as an operational requirement, this is a finding.
✔️ Fix
Remove the gssproxy package with the following command:
$ dnf remove gssproxy