highservicesverified ✓
Ensure XDMCP is not enabled
gdm-xdmcp-disabled · RHEL ≥ 8 · 3 impls
Description
If GNOME Display Manager is in use, the X Display Manager Control Protocol (XDMCP) should be disabled.
Rationale
XDMCP sends credentials in clear text and is vulnerable to man-in-the-middle attacks. It should be disabled for security.
Check → Remediate
Checkpackage_state
- name:
- gdm
- state:
- absent
Remediatepackage_absent
- name:
- gdm
Framework references
CIS
rhel9 1.8.10rhel8 1.8.6
NIST 800-53
CM-7
Live verification
rhel8:checkrhel9:check
#gdm#gnome#xdmcp#security