Detections
Analytics

1.255 OL09-00-002162

Information

OL 9 effective dconf policy must match the policy keyfiles.

GROUP ID: V-271692
RULE ID: SV-271692r1091788

Unlike text-based keyfiles, the binary database is impossible to check through most automated and all manual means; therefore, to evaluate dconf configuration, both have to be true at the same time - configuration files have to be compliant, and the database needs to be more recent than those keyfiles, which gives confidence that it reflects them.

Solution

Update the dconf databases by running the following command:

$ sudo dconf update

See Also

https://workbench.cisecurity.org/benchmarks/27024

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CCI|CCI-000366, Rule-ID|SV-271692r1091788_rule, STIG-ID|OL09-00-002162, Vuln-ID|V-271692

Plugin: Unix

Control ID: 4c9cb66ba302b2b15c19de20eeefa416ff2993436d53bb9762de303b66d7d6ce