Title

Unnecessary packages must not be installed. (Cat II impact)

Discussion

Removing unused packages frees disk space and reduces the risk of attackers finding vulnerabilities in unused components.

Check Content

Verify unnecessary packages are not installed. Open a terminal session and enter the following command. pkgutil / --pkgs Review the packages installed, determine if the installed packages are needed. If not, then this is a finding.

Fix Text

Review the packages installed using the following command. pkgutil / --pkgs Determine if the installed packages are needed. If not, verify any dependencies and use the rm command to remove them.

Additional Identifiers

Rule ID: SV-37149r1_rule

Vulnerability ID: V-25187

Group Title:

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.