Details

The X Window system provides a Graphical User Interface (GUI) where users can have

multiple windows in which to run programs and various add on. The X Window system is

typically used on desktops where users login, but not on servers where users typically do

not login.

*Rationale*

Unless your organization specifically requires graphical login access via X Windows, remove it to reduce the potential attack surface.

NOTE: Nessus has provided the target output to assist in reviewing the benchmark to ensure target compliance.

Solution

Uninstall X Windows-# apt-get purge xserver-xorg-core*

Supportive Information

The following resource is also helpful.

• https://workbench.cisecurity.org/files/91

This security hardening control applies to the following category of controls within NIST 800-53: Configuration Management.This control applies to the following type of system Unix.

References

• 800-53|CM-7b.

Source

• Tenable.com/audits