Detections
Analytics

1.254 RHEL-09-271095

Information

RHEL 9 must disable the ability of a user to restart the system from the login screen.

GROUP ID: V-258029
RULE ID: SV-258029r1045109

A user who is at the console can reboot the system at the login screen. If restart or shutdown buttons are pressed at the login screen, this can create the risk of short-term loss of availability of systems due to reboot.

Solution

Configure RHEL 9 to disable a user's ability to restart the system.

$ gsettings set org.gnome.login-screen disable-restart-buttons true

Update the dconf system databases:

$ sudo dconf update

See Also

https://workbench.cisecurity.org/benchmarks/22008

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-258029r1045109_rule, STIG-ID|RHEL-09-271095, Vuln-ID|V-258029

Plugin: Unix

Control ID: f6d319e567beefac8083e811b2043ae73a133c18311535eeadda961edf40a710