STIGQter: STIG Summary: Oracle Linux 6 Security Technical Implementation Guide Version: 2 Release: 3 Benchmark Date: 23 Apr 2021:

The sendmail package must be removed.

DISA Rule

SV-209021r603263_rule

Vulnerability Number

V-209021

Group Title

SRG-OS-000480

Rule Version

OL6-00-000288

Severity

CAT II

CCI(s)

• CCI-000366 - The organization implements the security configuration settings.

Weight

10

Fix Recommendation

Sendmail is not the default mail transfer agent and is not installed by default. The "sendmail" package can be removed with the following command:

# yum erase sendmail

Check Contents

Run the following command to determine if the "sendmail" package is installed:

# rpm -q sendmail

If the package is installed, this is a finding.

Vulnerability Number

V-209021

Documentable

False

Rule Version

OL6-00-000288

Severity Override Guidance

Run the following command to determine if the "sendmail" package is installed:

# rpm -q sendmail

If the package is installed, this is a finding.

Check Content Reference

M

Target Key

2928

Comments