Detections
Analytics
RHEL-10-700800 - RHEL 10 must ensure effective dconf policy matches the policy keyfiles.
Information
Unlike text-based keyfiles, the binary database is impossible to check through most automated and all manual means; therefore, to evaluate dconf configuration, both must be true at the same time. Configuration files must be compliant, and the database must be more recent than those keyfiles, which gives confidence that it reflects them.Solution
Configure RHEL 10 to ensure that the effective dconf policy matches the policy keyfiles.Update the dconf databases by running the following command:
$ sudo dconf update
See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_RHEL_10_V1R1_STIG.zip
Item Details
Audit Name: DISA Red Hat Enterprise Linux 10 STIG v1r1
Category: ACCESS CONTROL
References: 800-53|AC-3, CAT|II, CCI|CCI-000213, Rule-ID|SV-281283r1166801_rule, STIG-ID|RHEL-10-700800, Vuln-ID|V-281283
Plugin: Unix
Control ID: fb5b2a93483d57da2d2217a7f3d1da10ab31c24f0c88a9f2b59e9c790ef05341