STIGUI
V-257827CAT II — Medium severitySV-257827r1268251_rule

RHEL 9 must not have the sendmail package installed.

Rule version RHEL-09-215020 · STIG v2 · 2026-09-17

Discussion

The sendmail software was not developed with security in mind, and its design prevents it from being effectively contained by SELinux. Postfix must be used instead.

Satisfies: SRG-OS-000480-GPOS-00227, SRG-OS-000095-GPOS-00049

Check

Verify that the sendmail package is not installed with the following command:

$ dnf list --installed sendmail

Error: No matching Packages to list

If the "sendmail" package is installed, this is a finding.

Fix

Remove the sendmail package with the following command:

$ sudo dnf remove sendmail

Identifiers

Group ID
V-257827
Group title
SRG-OS-000480-GPOS-00227
Rule ID
SV-257827r1268251_rule
Check ID
C-61568r1044891_chk
Fix ID
F-61492r925467_fix