RHEL 10 must not have the "gdm" package installed.

Overview

Finding IDVersionRule IDIA ControlsSeverity
V-280950RHEL-10-200080SV-280950r1165205_ruleCCI-000381medium
Description
Unnecessary service packages must not be installed to decrease the attack surface of the system. A graphical environment is unnecessary for certain types of systems including a virtualization hypervisor.
STIGDate
Red Hat Enterprise Linux 10 Security Technical Implementation Guide2026-03-11

Details

Check Text (C-280950r1165205_chk)

Verify RHEL 10 does not have the "gdm" package installed with the following command: $ sudo dnf list --installed gdm Error: No matching Packages to list If the "gdm" package is installed and the need for a GUI interface has not been documented with the information system security officer, this is a finding.

Fix Text (F-85416r1165204_fix)

Configure RHEL 10 to not have the "gdm" package installed with the following command: $ sudo dnf -y remove gdm