Detections
Analytics

1.61 RHEL-09-215070

Information

A graphical display manager must not be installed on RHEL 9 unless approved.

GROUP ID: V-257837
RULE ID: SV-257837r1044910

Unnecessary service packages must not be installed to decrease the attack surface of the system. Graphical display managers have a long history of security vulnerabilities and must not be used, unless approved and documented.

Solution

Document the requirement for a graphical user interface with the ISSO or remove all xorg packages with the following command:

Warning: If you are accessing the system through the graphical user interface, change to the multi-user.target with the following command:

$ sudo systemctl isolate multi-user.target

Warning: Removal of the graphical user interface will immediately render it useless. The following commands must not be run from a virtual terminal emulator in the graphical interface.

$ sudo dnf remove "xorg*"
$ sudo systemctl set-default multi-user.target

See Also

https://workbench.cisecurity.org/benchmarks/22008

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-257837r1044910_rule, STIG-ID|RHEL-09-215070, Vuln-ID|V-257837

Plugin: Unix

Control ID: 56cd846d95b6f356831b27d4166731134ddbc90b2196a9997ec0b0a19a8fcaf3