Detections
Analytics
RHEL-10-700940 - RHEL 10 must not default to the graphical display manager unless approved.
Information
Unnecessary service packages must not be installed to decrease the attack surface of the system. Graphical display managers have a long history of security vulnerabilities and must not be used unless approved and documented.Solution
Configure RHEL 10 to boot to the command line by setting the default target to "multi-user" with the following command:$ sudo systemctl set-default multi-user.target
See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_RHEL_10_V1R1_STIG.zip
Item Details
Audit Name: DISA Red Hat Enterprise Linux 10 STIG v1r1
Category: CONFIGURATION MANAGEMENT
References: 800-53|CM-7a., CAT|II, CCI|CCI-000381, Rule-ID|SV-281297r1166843_rule, STIG-ID|RHEL-10-700940, Vuln-ID|V-281297
Plugin: Unix
Control ID: 0f74d2237a3d91d904fe1243dbe4bf4642bf65051af01edb2721bc6b044ec7e6