mediumservicesverified ✓rollback-safe
Ensure GNOME Display Manager is removed
gdm-removed · RHEL ≥ 8 · 2 impls
Description
The GNOME Display Manager (GDM) provides a graphical login interface. On servers, a graphical interface is unnecessary and increases attack surface.
Rationale
Removing the graphical display manager reduces the attack surface and resource consumption. Servers should be administered via SSH or console.
Check → Remediate
Checkpackage_state
- name:
- gdm
- state:
- absent
Remediatepackage_absent
- name:
- gdm
Framework references
CIS
rhel9 1.8.1rhel10 2.1.19rhel8 2.1.21
STIG
V-280950 / RHEL-10-200080V-230553
NIST 800-53
CM-7CM-6
Live verification
rhel10:checkrhel8:checkrhel9:check
#gdm#gnome#gui#attack-surface#server