UCF STIG Viewer Logo

An X Windows display manager must not be installed unless approved.


Overview

Finding ID Version Rule ID IA Controls Severity
V-215160 UBTU-16-030740 SV-215160r610931_rule Medium
Description
Internet services that are not required for system or application processes must not be active to decrease the attack surface of the system. X Windows has a long history of security vulnerabilities and will not be used unless approved and documented.
STIG Date
Canonical Ubuntu 16.04 LTS Security Technical Implementation Guide 2020-12-09

Details

Check Text ( C-16359r285348_chk )
Verify that if X Windows is installed it is authorized.

Check for the X11 package with the following command:

# dpkg -l | grep lightdm

Ask the System Administrator if use of the X Windows system is an operational requirement.

If the use of X Windows on the system is not documented with the Information System Security Officer (ISSO), this is a finding.
Fix Text (F-16357r285349_fix)
Document the requirement for an X Windows server with the Information System Security Officer (ISSO) or remove the related packages with the following commands:

# sudo apt-get purge lightdm