Red Hat Enterprise Linux 9 Security Technical Implementation Guide

The Red Hat Enterprise Linux 9 Security Technical Implementation Guide (V2 R10) has 445 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

445STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V2 · R10

CurrentPublished Wed Sep 30 2026

RHEL 9 must not have the sendmail package installed.

Red Hat Enterprise Linux 9 Security Technical Implementation Guide

Assessment Title

Rule Text

RHEL 9 must not have the sendmail package installed.

Description

Discussion Text

The sendmail software was not developed with security in mind, and its design prevents it from being effectively contained by SELinux. Postfix must be used instead.

Satisfies: SRG-OS-000480-GPOS-00227, SRG-OS-000095-GPOS-00049

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-257827

Rule

SV-257827r1268251_rule

Severity

medium

Rule Version

RHEL-09-215020

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

Verify that the sendmail package is not installed with the following command:

$ dnf list --installed sendmail

Error: No matching Packages to list

If the "sendmail" package is installed, this is a finding.

Implementation Procedure

Fix Text

Remove the sendmail package with the following command:

$ sudo dnf remove sendmail

STIG check 50 of 445 in the Red Hat Enterprise Linux 9 STIG checklist

← Previous · V-257826RHEL 9 must not have a File Transfer Protocol (FTP) server package installed.Next · V-257828 →RHEL 9 must not have the nfs-utils package installed.