The xorg-x11-server-common (X Windows) package must not be installed, unless required.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-218041	RHEL-06-000291	SV-218041r505923_rule		Low

Description
Unnecessary packages should not be installed to decrease the attack surface of the system.

STIG	Date
Red Hat Enterprise Linux 6 Security Technical Implementation Guide	2020-09-03

Details

Check Text ( C-19522r377138_chk )
To ensure the X Windows package group is removed, run the following command: $ rpm -qi xorg-x11-server-common The output should be: package xorg-x11-server-common is not installed If it is not, this is a finding.

Fix Text (F-19520r377139_fix)
Removing all packages which constitute the X Window System ensures users or malicious software cannot start X. To do so, run the following command: # yum groupremove "X Window System"