0086-X11-uninstalled-X11 Is Installed¶

Rule ID¶

• 0086-X11-uninstalled

Category¶

• system

Level¶

• warn

Compatible Versions¶

• Linux

Description¶

• The X Window System provides a graphical user interface (GUI) where users can have multiple windows to run programs and various add-ons. The X Window System is typically used on workstations where users log in, but is not suitable for servers where users do not usually log in.

Scan Frequency¶

• 0 */30 * * *

Rationale¶

• Unless your organization specifically requires graphical login access via X Windows, remove it to reduce the potential attack surface.

Risk Items¶

• Hacker infiltration
• Data leakage

Audit Method¶

• Run the following command to verify that the x11 package is not installed:

  # rpm -q x11
  # rpm -qa xorg-x11-server*
  

Remediation¶

• Run the following command to remove the openldap clients package:

  # yum remove xorg-x11-server*
  

Impact¶

• Many Linux systems run applications that require a Java runtime. Some Linux Java packages depend on specific X Window xorg-x11 fonts. A workaround to avoid this dependency is to use a "headless" Java package for the specific Java runtime.

Default Value¶

• None

References¶

• None

CIS Controls¶

• Version 7 2.6 Address Unapproved Software Ensure unauthorized software is removed, or the inventory is updated in a timely manner

• 9.2 Ensure Only Approved Ports, Protocols, and Services Are Running Ensure that only network ports, protocols, and services running on each system are those with verified business needs.