GEN000000-LNX00380 - An X server must have none of the following options enabled: -ac, -core (except for debugging) or -nolock - '-nolock'

Information

These options will detract from the security of the Xwindows system.

Solution

Disable the unwanted options:
Procedure:
For gdm:
Remove the -ac, -core and -nolock options by creating a 'command' entry in the /etc/gdm/custom.conf file with the options removed.

For Xwindows started by xinit:
Create or modify the .xserverrc script in the users home directory to remove the -ac, -core and -nolock options from the exec /usr/bin/X command.

See Also

http://iasecontent.disa.mil/stigs/zip/U_RedHat_5_V1R18_STIG.zip

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Group-ID|V-1022, Rule-ID|SV-37217r2_rule, STIG-ID|GEN000000-LNX00380, Vuln-ID|V-1022

Plugin: Unix

Control ID: 9cdb66b0dd46ba554f9904b5d2b76bd14c53e948541fe2ce4c0f7720d67ff0b8