Detections
Analytics

1.174 SLES-15-040062

Information

The SUSE operating system must disable the systemd Ctrl-Alt-Delete burst key sequence.

GROUP ID: V-234990
RULE ID: SV-234990r991589

A locally logged-on user, who presses Ctrl-Alt-Delete when at the console, can reboot the system. If accidentally pressed, as could happen in the case of a mixed OS environment, this can create the risk of short-term loss of availability of systems due to unintentional reboot. In the graphical user interface environment, risk of unintentional reboot from the Ctrl-Alt-Delete sequence is reduced because the user will be prompted before any action is taken.

Solution

Configure the system to disable the CtrlAltDelBurstAction by added or modifying the following line in the "/etc/systemd/system.conf" configuration file:

CtrlAltDelBurstAction=none

Reload the daemon for this change to take effect

sudo systemctl daemon-reload

See Also

https://workbench.cisecurity.org/benchmarks/23779

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|I, CCI|CCI-000366, Rule-ID|SV-234990r991589_rule, STIG-ID|SLES-15-040062, Vuln-ID|V-234990

Plugin: Unix

Control ID: 35d6568a229a4802c96906fcdd44a896d22608e123fa42e0c5d19429910dac48