The Red Hat Enterprise Linux operating system must not have an X Windows display manager installed unless approved.

From Red Hat Enterprise Linux 7 Security Technical Implementation Guide

Associated with: CCI-000366

SV-86931r4_rule The Red Hat Enterprise Linux operating system must not have an X Windows display manager installed unless approved.

Vulnerability discussion

Internet services that are not required for system or application processes must not be active to decrease the attack surface of the system. X Windows has a long history of security vulnerabilities and will not be used unless approved and documented.

Check content

Verify that if the system has X Windows System installed, it is authorized. Check for the X11 package with the following command: # rpm -qa | grep xorg | grep server Ask the System Administrator if use of the X Windows System is an operational requirement. If the use of X Windows on the system is not documented with the Information System Security Officer (ISSO), this is a finding.

Fix text

Document the requirement for an X Windows server with the ISSO or remove the related packages with the following commands: # rpm -e xorg-x11-server-common

Pro Tips

Lavender hyperlinks in small type off to the right (of CSS class id, if you view the page source) point to globally unique URIs for each document and item. Copy the link location and paste anywhere you need to talk unambiguously about these things.

You can obtain data about documents and items in other formats. Simply provide an HTTP header Accept: text/turtle or Accept: application/rdf+xml.