Detections
Analytics
SLES-15-040062 - The SUSE operating system must disable the systemd Ctrl-Alt-Delete burst key sequence.
Information
A locally logged-on user, who presses Ctrl-Alt-Delete when at the console, can reboot the system. If accidentally pressed, as could happen in the case of a mixed OS environment, this can create the risk of short-term loss of availability of systems due to unintentional reboot. In the graphical user interface environment, risk of unintentional reboot from the Ctrl-Alt-Delete sequence is reduced because the user will be prompted before any action is taken.Solution
Configure the system to disable the CtrlAltDelBurstAction by adding it to a drop file in a "/etc/systemd/system.conf.d/" configuration file:If no drop file exists, create one with the following command:
> sudo touch /etc/systemd/system.conf.d/55-CtrlAltDel-BurstAction
Edit the file to contain the setting by adding the following text:
CtrlAltDelBurstAction=none
Reload the daemon for this change to take effect:
> sudo systemctl daemon-reexec
See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_SLES_15_V2R6_STIG.zip
Item Details
Audit Name: DISA SUSE Linux Enterprise Server 15 STIG v2r6
Category: CONFIGURATION MANAGEMENT
References: 800-53|CM-6b., CAT|I, CCI|CCI-000366, Rule-ID|SV-234990r1106565_rule, STIG-ID|SLES-15-040062, Vuln-ID|V-234990
Plugin: Unix
Control ID: 60459915629fea8f46705cb8db1411489cf881738789286c05fa4321860a1de3