Details

The SETroubleshoot service notifies desktop users of SELinux denials through a user-friendly interface. The service provides important information around configuration errors, unauthorized intrusions, and other potential errors. The SETroubleshoot service is an unnecessary daemon to have running on a server, especially if X Windows is disabled.

NOTE – SELinux does not appear to be installed.

Solution

Run the following command to uninstall setroubleshoot: # zypper remove setroubleshoot

Supportive Information

The following resource is also helpful.

• https://workbench.cisecurity.org/files/1864https://workbench.cisecurity.org/files/1864

This security hardening control applies to the following category of controls within NIST 800-53: Configuration Management.This control applies to the following type of system Unix.

References

• 800-53|CM-7b.

Source

• Tenable.com/audits