Detections
Analytics
SLES-15-040061 - The SUSE operating system must disable the x86 Ctrl-Alt-Delete key sequence for Graphical User Interfaces.
Information
A locally logged-on user, who presses Ctrl-Alt-Delete when at the console, can reboot the system. If accidentally pressed, as could happen in the case of a mixed OS environment, this can create the risk of short-term loss of availability of systems due to unintentional reboot. In the graphical user interface environment, risk of unintentional reboot from the Ctrl-Alt-Delete sequence is reduced because the user will be prompted before any action is taken.Solution
Configure the system to disable the Ctrl-Alt-Delete sequence for the graphical user interface.Create a database to contain the systemwide setting (if it does not already exist) with the following steps:
1. Create a user profile and with the listed content:
/etc/dconf/profile/user
user-db:user
system-db:local
2. Create the following directories:
> sudo mkdir -p /etc/dconf/db/local.d/
> sudo mkdir -p /etc/dconf/db/local.d/locks/
3. Add the following files with the listed content:
/etc/dconf/db/local.d/01-fips-settings
[org/gnome/settings-daemon/plugins/media-keys]
logout=''
/etc/dconf/db/local.d/locks/01-fips-locks
/org/gnome/settings-daemon/plugins/media-keys/logout
4. Update the dconf database:
> sudo dconf update
See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_SLES_15_V2R6_STIG.zip
Item Details
Audit Name: DISA SUSE Linux Enterprise Server 15 STIG v2r6
Category: CONFIGURATION MANAGEMENT
References: 800-53|CM-6b., CAT|I, CCI|CCI-000366, Rule-ID|SV-234989r1155792_rule, STIG-ID|SLES-15-040061, Vuln-ID|V-234989
Plugin: Unix
Control ID: f470e755fd30786888ad425adfb4aaf430998f6b6181e194af196fe713a7c038