BaselineWatch
Apply as published
Desk
Your fleet and your work Fleetyour releases and the hardware they run onTriagewhat needs a decisionWatchlistthe products and platforms you runSaved searchesthe lists you come back to
This instance Sourceswhat is read, how often, under what termsDigestthe daily or weekly summary, and alerts
How it is drawn Appearancethe look and the colour schemeBrandingthe mark this instance wears
Owner sign-in

Linux RHEL-10-700730

DISA STIG RHEL-10-700730 (CAT II): RHEL 10 must prevent a user from overriding the disabling of the graphical user smart card removal action.

DISA STIG recommends

RHEL-10-700730 CAT II

RHEL 10 must prevent a user from overriding the disabling of the graphical user smart card removal action.

NIST SP 800-53: AC-11

Check

Note: This requirement assumes the use of the RHEL 10 default graphical user interface, the GNOME desktop environment. If the system does not have any graphical user interface installed, this requirement is not applicable. Verify RHEL 10 disables ability of the user to override the smart card removal action setting with the following command: $ gsettings writable org.gnome.settings-daemon.peripherals.smartcard removal-action false If "removal-action" is writable and the result is "true", this is a finding.

Fix

Configure RHEL 10 to prevent a user from overriding the disabling of the graphical user smart card removal action. Add the following line to "/etc/dconf/db/local.d/locks/00-security-settings-lock" to prevent user override of the smart card removal action: /org/gnome/settings-daemon/peripherals/smartcard/removal-action Update the dconf system databases: $ sudo dconf update

Our decision

Apply as published

No decision recorded: the recommendation stands. The owner signs in to change it.

All Linux decisions · The Linux baseline · The Linux test plan