Detections
Analytics

1.253 RHEL-09-271090

Information

RHEL 9 effective dconf policy must match the policy keyfiles.

GROUP ID: V-258028
RULE ID: SV-258028r991589

Unlike text-based keyfiles, the binary database is impossible to check through most automated and all manual means; therefore, in order to evaluate dconf configuration, both have to be true at the same time - configuration files have to be compliant, and the database needs to be more recent than those keyfiles, which gives confidence that it reflects them.

Solution

Update the dconf databases by running the following command:

$ sudo dconf update

See Also

https://workbench.cisecurity.org/benchmarks/22008

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-258028r991589_rule, STIG-ID|RHEL-09-271090, Vuln-ID|V-258028

Plugin: Unix

Control ID: aaf1a2b251dbf46bb80a68efd30251e005519f2dd953785db05650dce3fae035