RHEL 9 must disable the ability of a user to restart the system from the login screen.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
| V-258029 | RHEL-09-271095 | SV-258029r1045109_rule | CCI-000366 | medium |
| Description | ||||
| A user who is at the console can reboot the system at the login screen. If restart or shutdown buttons are pressed at the login screen, this can create the risk of short-term loss of availability of systems due to reboot. | ||||
| STIG | Date | |||
| Red Hat Enterprise Linux 9 Security Technical Implementation Guide | 2025-05-14 | |||
Related Frameworks
4 paths across 3 frameworks
Related Frameworks
NIST 800-531 mapping
CM-6
1.00
- DISA · 2 · disa_xccdf · related
- DISA · 2025-01-23 · disa_cci_list · equivalent
NIST 800-1712 mappings
3.4.1
1.00
- DISA · 2 · disa_xccdf · related
- DISA · 2025-01-23 · disa_cci_list · equivalent
- NIST · Rev 2 (Feb 2020, errata Jan 2021) · nist_800_171_app_d · equivalent
3.4.2
1.00
- DISA · 2 · disa_xccdf · related
- DISA · 2025-01-23 · disa_cci_list · equivalent
- NIST · Rev 2 (Feb 2020, errata Jan 2021) · nist_800_171_app_d · equivalent
CCI1 mapping
CCI-000366
1.00
- DISA · 2 · disa_xccdf · related
Details
Check Text (C-258029r1045109_chk)
Note: This requirement assumes the use of the RHEL 9 default graphical user interface, Gnome Shell. If the system does not have any graphical user interface installed, this requirement is Not Applicable.
Verify RHEL 9 disables a user's ability to restart the system with the following command:
$ gsettings get org.gnome.login-screen disable-restart-buttons
true
If "disable-restart-buttons" is "false", this is a finding.
Fix Text (F-61694r1045108_fix)
Configure RHEL 9 to disable a user's ability to restart the system.
$ gsettings set org.gnome.login-screen disable-restart-buttons true
Update the dconf system databases:
$ sudo dconf update