Rules Related To 'freeradius'

Component overview

Relevant packages:

Relevant groups:

Changelog:

No changes recorded.

Relevant rules:

Rule details

Remove the FreeRadius Server Package

package_freeradius_removed

Description

The freeradius package should be removed if not in use. Is this system a RADIUS server? If not, remove the package. The freeradius package should not be present in the container or container image. Remove the freeradius package from Containerfile and rebuild the container image. The freeradius RPM is not installed by default on a Hummingbird system. It is needed only by the RADIUS servers, not by the clients which use RADIUS for authentication. If the system is not intended for use as a RADIUS Server it should be removed.

Rationale

Unnecessary packages should not be installed to decrease the attack surface of the system. While this software is clearly essential on a RADIUS server, it is not necessary on typical desktop or workstation systems.