Check: RHEL-06-000291
Red Hat Enterprise Linux 6 STIG:
RHEL-06-000291
(in versions v2 r2 through v1 r14)
Title
The xorg-x11-server-common (X Windows) package must not be installed, unless required. (Cat III impact)
Discussion
Unnecessary packages should not be installed to decrease the attack surface of the system.
Check Content
To ensure the X Windows package group is removed, run the following command: $ rpm -qi xorg-x11-server-common The output should be: package xorg-x11-server-common is not installed If it is not, this is a finding.
Fix Text
Removing all packages which constitute the X Window System ensures users or malicious software cannot start X. To do so, run the following command: # yum groupremove "X Window System"
Additional Identifiers
Rule ID: SV-218041r603264_rule
Vulnerability ID: V-218041
Group Title: SRG-OS-000095
Expert Comments
CCIs
| Number | Definition |
|---|---|
| CCI-000366 |
The organization implements the security configuration settings. |
| CCI-000381 |
The organization configures the information system to provide only essential capabilities. |