Graphical Interface

The following CIS controls are excluded from some hardened Linux VM images. These controls apply to GNOME Display Manager (GDM) and other graphical interface components, which are not included in OpenLogic's virtual machine images. As such, these controls are not applicable in headless or server-based deployments.

CIS 1.8: Configure GNOME Display Manager

  • CIS 1.8.1: Ensure GDM is removed

  • CIS 1.8.2: Ensure the GDM login banner is configured

  • CIS 1.8.3: Ensure the GDM disable-user-list option is enabled

  • CIS 1.8.4: Ensure GDM screen locks when the user is idle

  • CIS 1.8.5: Ensure GDM screen locks cannot be overridden

  • CIS 1.8.6: Ensure GDM automatic mounting of removable media is disabled

  • CIS 1.8.7: Ensure GDM disabling automatic mounting of removable media is not overridden

  • CIS 1.8.8: Ensure GDM autorun-never is enabled

  • CIS 1.8.9: Ensure GDM autorun-never is not overridden

  • CIS 1.8.10 Ensure XDCMP is not enabled

CIS 1.7: Configure GNOME Display Manager

  • CIS 1.7.1: Ensure GDM is removed

  • CIS 1.7.2: Ensure the GDM login banner is configured

  • CIS 1.7.3: Ensure the GDM disable-user-list option is enabled

  • CIS 1.7.4: Ensure GDM screen locks when the user is idle

  • CIS 1.7.5: Ensure GDM screen locks cannot be overridden

  • CIS 1.7.6: Ensure GDM automatic mounting of removable media is disabled

  • CIS 1.7.7: Ensure GDM disabling automatic mounting of removable media is not overridden

  • CIS 1.7.8: Ensure GDM autorun-never is enabled

  • CIS 1.7.9: Ensure GDM autorun-never is not overridden

  • CIS 1.7.10 Ensure XDCMP is not enabled