PHTN-67-000070 - The Photon operating system must remove all software components after updated versions have been installed.

Information

Previous versions of software components that are not removed from the information system after updates have been installed may be exploited by adversaries. Some information technology products may remove older versions of software automatically from the information system.

Solution

Open /etc/tdnf/tdnf.conf with a text editor.

Remove any existing 'clean_requirements_on_remove' line and ensure the following line is present:

clean_requirements_on_remove=true

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_VMW_vSphere_6-7_Y23M07_STIG.zip

Item Details

Category: SYSTEM AND INFORMATION INTEGRITY

References: 800-53|SI-2(6), CAT|II, CCI|CCI-002617, Rule-ID|SV-239141r856059_rule, STIG-ID|PHTN-67-000070, Vuln-ID|V-239141

Plugin: Unix

Control ID: 7d2b7778560ab56bdb4625b229b1922c5fcaa7c3ba4babe3185def41277ba941