Detections
Analytics

4.5.1.6 CDE - remote GUI login disabled

Information

The XDMCP service allows remote systems to start local X login sessions.

Rationale:

The XDMCP service should be disabled unless there is a requirement to allow remote X servers to start login sessions. If the ability to host remote X servers is not required, disable the service.

Solution

Copy /usr/dt/config/Xconfig to /etc/dt/config if it does not already exist:

ls -l /etc/dt/config/Xconfig

If the file does not exist, create it:

mkdir -p /etc/dt/config
cp /usr/dt/config/Xconfig /etc/dt/config

Disable remote X sessions from being started:

vi /etc/dt/config/Xconfig

Replace:

# Dtlogin.requestPort: 0

With:

Dtlogin.requestPort: 0

Default Value:

Enabled

Additional Information:

Reversion:

Comment out the option:

vi /etc/dt/config/Xconfig

Reflect:

# Dtlogin.requestPort: 0

See Also

https://workbench.cisecurity.org/benchmarks/7851

Item Details

Plugin: Unix

Control ID: 5edf29fb59391e2bb8f8c6e1eca1c38b76c6c0cf796ad5ac96153bbb3d4222c2