AlmaLinux OS 9 must not have the gssproxy package installed.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-269340	ALMA-09-029500	SV-269340r1050222_rule		Medium

Description

The gssproxy package is a proxy for GSS API credential handling and could expose secrets on some networks. It is not needed for normal function of the OS.

STIG	Date
CloudLinux AlmaLinux OS 9 Security Technical Implementation Guide	2025-05-22

Details

Check Text (C-73371r1048396_chk)

Verify that the gssproxy package is not installed with the following command:

$ dnf list --installed gssproxy

Error: No matching Packages to list

If the "gssproxy" package is installed and is not documented with the information system security officer (ISSO) as an operational requirement, this is a finding.

Fix Text (F-73272r1048397_fix)

Remove the gssproxy package with the following command:

$ dnf remove gssproxy