Detections
Analytics
GEN000000-LNX00380 - An X server must have none of the following options enabled: -ac, -core (except for debugging), or -nolock - '-ac'
Information
These options will detract from the security of the Xwindows system.Solution
Disable the unwanted options:Procedure:
For gdm:
Remove the -ac, -core and -nolock options by creating a 'command' entry in the /etc/gdm/custom.conf file with the options removed.
For Xwindows started by xinit:
Create or modify the .xserverrc script in the users home directory to remove the -ac, -core and -nolock options from the exec /usr/bin/X command.
See Also
http://iasecontent.disa.mil/stigs/zip/U_RedHat_5_V1R18_STIG.zip
Item Details
Category: CONFIGURATION MANAGEMENT
References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Group-ID|V-1022, Rule-ID|SV-37217r2_rule, STIG-ID|GEN000000-LNX00380, Vuln-ID|V-1022
Plugin: Unix
Control ID: f1f1271899389ae18bf83d1ea72b6b9ca36f0a1a8f1ceb96cc169b32487ee6f3