Detections
Analytics

1.365 RHEL-10-700940

Information

RHEL 10 must not default to the graphical display manager unless approved.

GROUP ID: V-281297RULE ID: SV-281297r1166843

Unnecessary service packages must not be installed to decrease the attack surface of the system. Graphical display managers have a long history of security vulnerabilities and must not be used unless approved and documented.

Solution

Configure RHEL 10 to boot to the command line by setting the default target to "multi-user" with the following command:

$ sudo systemctl set-default multi-user.target

See Also

https://workbench.cisecurity.org/benchmarks/26403

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-7, 800-53|CM-7a., CAT|II, CCI|CCI-000381, Rule-ID|SV-281297r1166843_rule, STIG-ID|RHEL-10-700940, Vuln-ID|V-281297

Plugin: Unix

Control ID: d91226632c3fc4d595e07ba082b0d28fc1cdd4a3071a7f10c156814c9c9c7d47