UCF STIG Viewer Logo

The xorg-x11-server-common (X Windows) package must not be installed, unless required.


Overview

Finding ID Version Rule ID IA Controls Severity
V-209023 OL6-00-000291 SV-209023r793744_rule Low
Description
Unnecessary packages should not be installed to decrease the attack surface of the system.
STIG Date
Oracle Linux 6 Security Technical Implementation Guide 2021-12-03

Details

Check Text ( C-9276r357854_chk )
To ensure the X Windows package group is removed, run the following command:

$ rpm -qi xorg-x11-server-common

The output should be:

package xorg-x11-server-common is not installed

If it is not, this is a finding.
Fix Text (F-9276r357855_fix)
Removing all packages which constitute the X Window System ensures users or malicious software cannot start X. To do so, run the following command:

# yum groupremove "X Window System"