Rules Related To 'freeradius'

Component overview

Relevant packages:

Relevant groups:

Changelog:

No changes recorded.

Relevant rules:

Rule details

Remove the FreeRadius Server Package

package_freeradius_removed

Description

The freeradius package should be removed if not in use. Is this system a RADIUS server? If not, remove the package. The freeradius package can be removed with the following command: 

$ sudo dnf remove freeradius
The freeradius RPM is not installed by default on a Red Hat Enterprise Linux 10 system. It is needed only by the RADIUS servers, not by the clients which use RADIUS for authentication. If the system is not intended for use as a RADIUS Server it should be removed.

Rationale

Unnecessary packages should not be installed to decrease the attack surface of the system. While this software is clearly essential on a RADIUS server, it is not necessary on typical desktop or workstation systems.