Detections
Analytics

1.352 RHEL-10-700800

Information

RHEL 10 must ensure effective dconf policy matches the policy keyfiles.

GROUP ID: V-281283
RULE ID: SV-281283r1166801

Unlike text-based keyfiles, the binary database is impossible to check through most automated and all manual means; therefore, to evaluate dconf configuration, both must be true at the same time. Configuration files must be compliant, and the database must be more recent than those keyfiles, which gives confidence that it reflects them.

Solution

Configure RHEL 10 to ensure that the effective dconf policy matches the policy keyfiles.

Update the dconf databases by running the following command:

$ sudo dconf update

See Also

https://workbench.cisecurity.org/benchmarks/26403

Item Details

Category: ACCESS CONTROL

References: 800-53|AC-3, CAT|II, CCI|CCI-000213, Rule-ID|SV-281283r1166801_rule, STIG-ID|RHEL-10-700800, Vuln-ID|V-281283

Plugin: Unix

Control ID: 7d0a2a72a97f174e7cd9e7d24b99163562453d8efc2e90c7cf17ab345c5cc773