documentation_complete: true

# new major OS versions will most likely not be applicable because of the
# kerberos version higher than 1.17-18

title: 'Uninstall krb5-workstation Package'

description: |-
    {{{ describe_package_remove(package="krb5-workstation") }}}

rationale: |-
    Kerberos is a network authentication system. The <tt>krb5-workstation</tt> package contains the basic
    Kerberos programs (<tt>kinit</tt>, <tt>klist</tt>, <tt>kdestroy</tt>, <tt>kpasswd</tt>).

severity: medium

identifiers:
    cce@rhel8: CCE-82931-7
    cce@rhel9: CCE-83520-7

references:
    srg: SRG-OS-000095-GPOS-00049,SRG-OS-000120-GPOS-00061
    stigid@ol8: OL08-00-010162

platforms:
{{%- if "rhel" in product %}}
    - no_ovirt and krb5_workstation_older_than_1_17-18
{{%- else %}}
    - krb5_workstation_older_than_1_17-18
{{%- endif %}}

warnings:
{{{ warning_ovirt_rule_notapplicable("RHV hosts require ipa-client package, which has dependency on krb5-workstation") | indent(4) }}}

{{{ complete_ocil_entry_package(package="krb5-workstation") }}}

template:
    name: package_removed
    vars:
        pkgname: krb5-workstation

fixtext: |-
    {{{ describe_package_remove(package="krb5-workstation") }}}

srg_requirement:
    The krb5-workstation package must not be installed on {{{ full_name }}}.
