Rules Related To 'freeradius'

Component overview

Relevant packages:

Relevant groups:

Changelog:

No changes recorded.

Relevant rules:

Rule details

Remove the FreeRadius Server Package

package_freeradius_removed

Description

The freeradius package should be removed if not in use. Is this system a RADIUS server? If not, remove the package. The freeradius package can be removed with the following command: 

$ sudo dnf remove freeradius
The freeradius RPM is not installed by default on a Amazon Linux 2023 system. It is needed only by the RADIUS servers, not by the clients which use RADIUS for authentication. If the system is not intended for use as a RADIUS Server it should be removed.

Rationale

Unnecessary packages should not be installed to decrease the attack surface of the system. While this software is clearly essential on a RADIUS server, it is not necessary on typical desktop or workstation systems.