Red Hat Enterprise Linux 9 Security Technical Implementation Guide

The Red Hat Enterprise Linux 9 Security Technical Implementation Guide (V2 R9) has 445 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

445STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V2 · R9

ArchivedPublished Wed Jul 01 2026

RHEL 9 must not have the ypserv package installed.

Red Hat Enterprise Linux 9 Security Technical Implementation Guide

Assessment Title

Rule Text

RHEL 9 must not have the ypserv package installed.

Description

Discussion Text

The NIS service provides an unencrypted authentication service, which does not provide for the confidentiality and integrity of user passwords or the remote session.

Removing the "ypserv" package decreases the risk of the accidental (or intentional) activation of NIS or NIS+ services.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-257829

Rule

SV-257829r1044896_rule

Severity

medium

Rule Version

RHEL-09-215030

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

Verify that the ypserv package is not installed with the following command:

$ dnf list --installed ypserv

Error: No matching Packages to list

If the "ypserv" package is installed, this is a finding.

Implementation Procedure

Fix Text

Remove the ypserv package with the following command:

$ sudo dnf remove ypserv

STIG check 52 of 445 in the Red Hat Enterprise Linux 9 STIG checklist

← Previous · V-257828RHEL 9 must not have the nfs-utils package installed.Next · V-257830 →RHEL 9 must not install packages from the Extra Packages for Enterprise Linux (EPEL) repository.