# Ensure SETroubleshoot Package is Not Installed

- Source: https://support.icompaas.com/support/solutions/articles/62000235140-ensure-setroubleshoot-package-is-not-installed
- Section: [Solutions](https://support.icompaas.com/support/solutions) › [CIS Amazon Linux 2 Benchmark v3.0.0](https://support.icompaas.com/support/solutions/62000112696) › [CIS Amazon Linux 2 Benchmarks](https://support.icompaas.com/support/solutions/folders/62000169265)
- Last updated: 2026-05-29
- Publisher: iCompaas, Inc. (https://www.icompaas.com)

**Profile Applicability:** • Level 1

Description: SETroubleshoot is a tool that provides detailed SELinux alerts and troubleshooting information. While useful for debugging, it can expose sensitive information and increase the attack surface if installed on production systems where such detail is unnecessary.

**Rationale:** Removing or not installing SETroubleshoot reduces potential information leakage and minimizes the risk exposure of SELinux-related vulnerabilities.

**Impact:** Pros:

-   Reduces attack surface by eliminating unnecessary packages.  
    
-   Limits exposure of sensitive SELinux alert information.  
    

Cons:

-   May reduce the ability to quickly troubleshoot SELinux issues.  
    

**Default Value:** SETroubleshoot may be installed by default on some SELinux-enabled distributions.

**Pre-requisites:**

-   Root or sudo privileges to manage installed packages.  
    

**Remediation:**

### **Test Plan:**

**Using Linux command line:**

1\. Check if SETroubleshoot is installed:  

rpm -q setroubleshoot

2\. Confirm that the package is not installed.  
  
**Implementation Plan:**

**Using Linux command line:**

1\. Remove SETroubleshoot if installed:  

yum remove setroubleshoot -y

2\. Verify removal:  

rpm -q setroubleshoot

### **Backout Plan:**

**Using Linux command line:**

1\. Reinstall SETroubleshoot if needed  

yum install setroubleshoot -y

2\. Verify installation:  

rpm -q setroubleshoot

**References:**

-   CIS Amazon Linux 2 Benchmark v3.0.0  
    
-   SELinux Project Documentation

## Related compliance guidance

- [SOC 2 compliance: a practical implementation guide for cloud-native SaaS teams](https://support.icompaas.com/compliance/soc-2-trust-services-criteria): Configuration checks like this one are the technical half of a SOC 2 / ISO 27001 programme — the guide shows where they fit, what else an auditor expects, and how to evidence them.
- [ISO/IEC 27001:2022 compliance: a practical implementation guide](https://support.icompaas.com/compliance/iso-27001-2022): ISO 27001 Annex A.8 (technological controls) is where cloud hardening evidence lands; the guide shows how to run the ISMS around it.