← Rules Catalog
mediumservicesverified

Ensure GDM effective dconf policy matches the policy keyfiles

gdm-dconf-database-current · RHEL ≥ 8 · 3 impls

Description

The GNOME dconf database must be compiled from the current policy keyfiles so that the effective policy matches the configured policy.

Rationale

If the dconf database is not regenerated after policy keyfiles are updated, the effective policy in use may not match the intended security configuration. Running dconf update ensures all policy settings take effect immediately.

Check → Remediate

Checkpackage_state
name:
gdm
state:
absent
Remediatepackage_absent
name:
gdm

Framework references

STIG

V-258028 / RHEL-09-271090

NIST 800-53

CM-6

Live verification

rhel9:check
#gdm#gnome#dconf#policy#security