STIGQter: STIG Summary: Red Hat Enterprise Linux 8 Security Technical Implementation Guide Version: 2 Release: 8 Benchmark Date: 01 Jul 2026:

RHEL 8 must not install packages from the Extra Packages for Enterprise Linux (EPEL) repository.

DISA Rule

SV-230492r1184277_rule

Vulnerability Number

V-230492

Group Title

SRG-OS-000095-GPOS-00049

Rule Version

RHEL-08-040010

Severity

CAT II

CCI(s)

CCI-000381 - Configure the system to provide only organization-defined mission essential capabilities.

Weight

Fix Recommendation

The repo package can be manually removed with the following command:

$ sudo dnf remove epel-release

Configure the operating system to disable use of the EPEL repository with the following command:

$ sudo dnf config-manager --set-disabled epel

Check Contents

Verify that RHEL 8 is not able to install packages from the EPEL with the following command:

$ dnf repolist
rhel-8-for-x86_64-appstream-rpms Red Hat Enterprise Linux 8 for x86_64 - AppStream (RPMs)
rhel-8-for-x86_64-baseos-rpms Red Hat Enterprise Linux 8 for x86_64 - BaseOS (RPMs)
rhel-8-for-x86_64-baseos-source-rpms Red Hat Enterprise Linux 8 for x86_64 - BaseOS (Source RPMs)
rhel-8-for-x86_64-supplementary-rpms Red Hat Enterprise Linux 8 for x86_64 - Supplementary (RPMs)
satellite-tools-6.10-for-rhel-8-x86_64-rpms Red Hat Satellite Tools 6.10 for RHEL 8 x86_64 (RPMs)

If any repositories containing the word "epel" in the name exist, this is a finding.

Vulnerability Number

V-230492

Documentable

False

Rule Version

RHEL-08-040010

Severity Override Guidance

Check Content Reference

Target Key

2921