2.2.2 Ensure X Window System is not installed

Information

The X Window System provides a Graphical User Interface (GUI) where users can have multiple windows in which to run programs and various add on. The X Windows system is typically used on workstations where users login, but not on servers where users typically do not login.

Rationale:

Unless your organization specifically requires graphical login access via X Windows, remove it to reduce the potential attack surface.

Solution

Run the following command to remove the X Windows System packages:

apt-get remove xserver-xorg*

See Also

https://workbench.cisecurity.org/files/2619

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-11, CSCv7|2.6

Plugin: Unix

Control ID: 60cc117bb4dc5b7af2f76ec27fd4339a263d80186ebcc4c43d1b690f6d55e49a