mediumservicesverified ✓rollback-safe
Ensure X window server services are not in use
xorg-removed · RHEL ≥ 8 · 2 impls
Description
The X Window System provides a graphical interface. On servers, this is unnecessary and increases the attack surface.
Rationale
Removing the X Window System reduces the attack surface significantly. Servers should be managed via command line or remote management tools.
Check → Remediate
Checkpackage_state
- name:
- xorg-x11-server-common
- state:
- absent
Remediatepackage_absent
- name:
- xorg-x11-server*
Framework references
CIS
rhel9 2.1.20rhel10 2.1.20rhel8 2.1.22
STIG
V-257837 / RHEL-09-215070
NIST 800-53
CM-7
Live verification
rhel10:checkrhel8:checkrhel9:check
#xorg#x11#gui#attack-surface#server