Detections
Analytics

1.355 RHEL-10-700830

Information

RHEL 10 must disable the ability of a user to accidentally press Ctrl-Alt-Del and cause a system to shut down or reboot.

GROUP ID: V-281286
RULE ID: SV-281286r1166810

A locally logged-in user who presses Ctrl-Alt-Del, when at the console, can reboot the system. If accidentally pressed, as could happen in the case of mixed operating system environments, this can create the risk of short-term loss of availability of systems due to unintentional reboot.

Solution

Configure RHEL 10 to ignore the Ctrl-Alt-Del sequence in the GNOME desktop.

Note: The example below is using the database "local" for the system. If the system is using another database in "/etc/dconf/profile/user", the file should be created under the appropriate subdirectory.

Update the "/etc/dconf/db/local.d/00-media-keys" file to set the media-keys logout setting as an empty string array:

$ sudo vi /etc/dconf/db/local.d/00-media-keys

[org/gnome/settings-daemon/plugins/media-keys]logout=@as []

Run the following command to update the database:

$ sudo dconf update

See Also

https://workbench.cisecurity.org/benchmarks/26403

Item Details

Category: SYSTEM AND COMMUNICATIONS PROTECTION

References: 800-53|SC-5, CAT|II, CCI|CCI-002385, Rule-ID|SV-281286r1166810_rule, STIG-ID|RHEL-10-700830, Vuln-ID|V-281286

Plugin: Unix

Control ID: 0ceaf5313024e92ee2aa1ce0a88ecf8a09bb2fb495595d42230b1417108e9e10