Detections
Analytics

1.248 OL09-00-002127

Information

OL 9 must disable the ability of a user to restart the system from the login screen.

GROUP ID: V-271685
RULE ID: SV-271685r1091767

A user who is at the console can reboot the system at the login screen. If restart or shutdown buttons are pressed at the login screen, this can create the risk of short-term loss of availability of systems due to reboot.

Solution

Configure OL 9 to disable a user's ability to restart the system.

Add or update the [org/gnome/settings-daemon/] section of the /etc/dconf/db/local.d/00-security-settings" database file and add or update the following lines:

[org/gnome/settings-daemon/peripherals/smartcard]
disable-restart-buttons='true'

Then update the dconf system databases:

$ sudo dconf update

See Also

https://workbench.cisecurity.org/benchmarks/27024

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CCI|CCI-000366, Rule-ID|SV-271685r1091767_rule, STIG-ID|OL09-00-002127, Vuln-ID|V-271685

Plugin: Unix

Control ID: 584d01b139ea6e24c755d285aed73fae71291d4e13db82e4733eefc6f2a3be54