documentation_complete: true


title: 'Uninstall nftables package'

description: |-
    nftables is a subsystem of the Linux kernel providing filtering and classification of network
    packets/datagrams/frames and is the successor to iptables.
    {{{ describe_package_remove(package="nftables") }}}

rationale: |-
    Running both <tt>firewalld</tt> and <tt>nftables</tt> may lead to conflict.

severity: medium

identifiers:
    cce@sle15: CCE-92518-0
    cce@slmicro5: CCE-93984-3

references:
    cis@sle15: 3.5.1.2,3.5.3.1.2

{{{ complete_ocil_entry_package(package="nftables") }}}

fixtext: '{{{ fixtext_package_removed("nftables") }}}'

{{%- if product in [ "sle12", "sle15" ] %}}
template:
    name: package_removed_guard_var
    vars:
        pkgname: nftables
        variable: var_network_filtering_service
        value: firewalld|nftables
        operation: pattern match
{{%- else %}}
template:
    name: package_removed
    vars:
        pkgname: nftables
{{%- endif %}}
