Detections
Analytics

RHEL-10-700830 - RHEL 10 must disable the ability of a user to accidentally press Ctrl-Alt-Del and cause a system to shut down or reboot.

Information

A locally logged-in user who presses Ctrl-Alt-Del, when at the console, can reboot the system. If accidentally pressed, as could happen in the case of mixed operating system environments, this can create the risk of short-term loss of availability of systems due to unintentional reboot.

Solution

Configure RHEL 10 to ignore the Ctrl-Alt-Del sequence in the GNOME desktop.

Note: The example below is using the database "local" for the system. If the system is using another database in "/etc/dconf/profile/user", the file should be created under the appropriate subdirectory.

Update the "/etc/dconf/db/local.d/00-media-keys" file to set the media-keys logout setting as an empty string array:

$ sudo vi /etc/dconf/db/local.d/00-media-keys

[org/gnome/settings-daemon/plugins/media-keys]
logout=@as []

Run the following command to update the database:

$ sudo dconf update

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_RHEL_10_V1R1_STIG.zip

Item Details

Category: SYSTEM AND COMMUNICATIONS PROTECTION

References: 800-53|SC-5, CAT|II, CCI|CCI-002385, Rule-ID|SV-281286r1166810_rule, STIG-ID|RHEL-10-700830, Vuln-ID|V-281286

Plugin: Unix

Control ID: 3668515149fd9ebbcbb4472564e4ba9e0683398fc00a48d392329e7c4c56b956