STIGQter: STIG Summary: Oracle Linux 8 Security Technical Implementation Guide Version: 2 Release: 9 Benchmark Date: 01 Jul 2026:

YUM must remove all software components after updated versions have been installed on OL 8.

DISA Rule

SV-248595r958936_rule

Vulnerability Number

V-248595

Group Title

SRG-OS-000437-GPOS-00194

Rule Version

OL08-00-010440

Severity

CAT III

CCI(s)

• CCI-002617 - Remove previous versions of organization-defined software components after updated versions have been installed.

Weight

10

Fix Recommendation

Configure OL 8 to remove all software components after updated versions have been installed.

Set the "clean_requirements_on_remove" option to "True" in the "/etc/yum.conf" file:

clean_requirements_on_remove=True

Check Contents

Verify the operating system removes all software components after updated versions have been installed.

Check if YUM is configured to remove unneeded packages with the following command:

$ sudo grep -i clean_requirements_on_remove /etc/yum.conf

clean_requirements_on_remove=True

If "clean_requirements_on_remove" is not set to "True", commented out, or missing from "/etc/yum.conf", this is a finding.

Vulnerability Number

V-248595

Documentable

False

Rule Version

OL08-00-010440

Severity Override Guidance

Verify the operating system removes all software components after updated versions have been installed.

Check if YUM is configured to remove unneeded packages with the following command:

$ sudo grep -i clean_requirements_on_remove /etc/yum.conf

clean_requirements_on_remove=True

If "clean_requirements_on_remove" is not set to "True", commented out, or missing from "/etc/yum.conf", this is a finding.

Check Content Reference

M

Target Key

5416