STIGUI
V-248827CAT I — High severitySV-248827r1208716_rule

OL 8 must not install packages from the Extra Packages for Enterprise Linux (EPEL) repository.

Rule version OL08-00-040010 · STIG v2 · 2026-08-24

Discussion

The EPEL is a repository of high-quality open-source packages for enterprise-class Linux distributions such as RHEL, CentOS, AlmaLinux, Rocky Linux, and Oracle Linux. These packages are not part of the official distribution but are built using the same Fedora build system to ensure compatibility and maintain quality standards.

Check

Verify that OL 8 is not able to install packages from the EPEL with the following command:

$ dnf repolist repo id repo name ol8_UEKR7 Latest Unbreakable Enterprise Kernel Release 7 for Oracle Linux 8 (x86_64) ol8_appstream Oracle Linux 8 Application Stream (x86_64) ol8_baseos_latest Oracle Linux 8 BaseOS Latest (x86_64)

If any repositories containing the word "epel" in the name exist, this is a finding.

Fix

Configure OL 8 to not be able to install packages from the EPEL.

Search for and remove any/all packages that came from the EPEL repo:

$ dnf repository-packages ol8_developer_EPEL remove

Remove the package that installs access to the EPEL repo:

$ dnf remove oracle-epel-release-el8

Identifiers

Group ID
V-248827
Group title
SRG-OS-000095-GPOS-00049
Rule ID
SV-248827r1208716_rule
Check ID
C-52261r1134848_chk
Fix ID
F-52215r1208715_fix