Detections
Analytics

1.249 OL09-00-002128

Information

OL 9 must prevent a user from overriding the disable-restart-buttons setting for the graphical user interface.

GROUP ID: V-271686
RULE ID: SV-271686r1091770

A user who is at the console can reboot the system at the login screen. If restart or shutdown buttons are pressed at the login screen, this can create the risk of short-term loss of availability of systems due to reboot.

Solution

Configure OL 9 to prevent a user from overriding the disable-restart-buttons setting for graphical user interfaces.

Create a database to contain the system-wide graphical user logon settings (if it does not already exist) with the following command:

$ sudo touch /etc/dconf/db/local.d/locks/session

Add the following line to prevent nonprivileged users from modifying it:

/org/gnome/login-screen/disable-restart-buttons

Run the following command to update the database:

$ sudo dconf update

See Also

https://workbench.cisecurity.org/benchmarks/27024

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CCI|CCI-000366, Rule-ID|SV-271686r1091770_rule, STIG-ID|OL09-00-002128, Vuln-ID|V-271686

Plugin: Unix

Control ID: f6a95f911faeba5bcc497848d28a8dafbd243f26487dd75eb551ee614715fd5a