# Ensure web proxy server services are not in use

Necessity: Web proxy servers, such as Squid, can be powerful tools but also introduce significant security risks if not explicitly required and securely configured. They increase the system's attack surface, and a compromised proxy can be used to bypass network security, launch attacks against other internal systems, or perform man-in-the-middle attacks on user traffic. Adhering to the principle of least functionality, any service not essential to the system's role should be removed to minimize potential vulnerabilities.

Auditing and Remediation: The audit script verifies whether the 'squid' package, a common proxy server on Linux, is installed. The remediation script uninstalls and purges the 'squid' package and its configuration files from the system, effectively removing the service.

Recommended State Rationale: The recommendation for all levels (Basic, Moderate, and Strict) is 'Not Installed'. This is a binary security control; the server is either necessary or it is not. For any system not designated to function as a web proxy, the software presents an unnecessary risk. There is no intermediate 'moderately secure' state for an unneeded, high-risk service. Therefore, the only secure recommendation is its complete removal.

## Recommended State Configuration

| Security Level | Value |
|----------------|-------|
| **Basic** | `['Not Installed']` |
| **Moderate** | `['Not Installed']` |
| **Strict** | `['Not Installed']` |
| **Type** | `ENUM` |

## Audit Script Working

Bash script that checks if the 'squid' package is installed. The script must return only the string 'Installed' if the package is present, or 'Not Installed' if it is not, with no extra text or labels.

## Remediation Script Working

Bash script that accepts one argument representing the desired state. If the argument is 'Not Installed', the script must attempt to purge the 'squid' package. The script must return 'true' on successful removal or if the package was already absent, and 'false' if the removal fails.

