3.3 Remove X Windows - X Window System

Information

The X Windows system provides a Graphical User Interface (GUI) where users can have multiple windows in which to run programs and various add on. The X Windows system is typically used on desktops where users login, but not on servers where users typically do not login.

Rationale:

Unless your organization specifically requires graphical login access via X Windows, remove it to reduce the potential attack surface.

Solution

Edit /etc/inittab set default runlevel as follows:

s/:5:/:3:/

Uninstall the X Windows System:

# yum groupremove 'X Window System'

Default Value:

OS Default: N/A

See Also

https://workbench.cisecurity.org/files/3096

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-11, CSCv7|2.6

Plugin: Unix

Control ID: e2496a4540779cce6f7ba9df566909ae7a42ae15559ae9e215da59e03359c1c3