Cloud Linux AlmaLinux OS 9 Security Technical Implementation Guide

The Cloud Linux AlmaLinux OS 9 Security Technical Implementation Guide (V1 R8) has 439 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

439STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V1 · R8

CurrentPublished Wed Sep 30 2026

The graphical display manager must not be the default target on AlmaLinux OS 9 unless approved.

Cloud Linux AlmaLinux OS 9 Security Technical Implementation Guide

Assessment Title

Rule Text

The graphical display manager must not be the default target on AlmaLinux OS 9 unless approved.

Description

Discussion Text

Unnecessary service packages must not be installed to decrease the attack surface of the system.

Graphical display managers have a long history of security vulnerabilities and must not be used, unless approved and documented.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-269206

Rule

SV-269206r1050088_rule

Severity

medium

Rule Version

ALMA-09-014320

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

Verify that AlmaLinux OS 9 is configured to boot to the command line:

$ systemctl get-default

multi-user.target

If the system default target is not set to "multi-user.target" and the information system security officer (ISSO) lacks a documented requirement for a graphical user interface, this is a finding.

Implementation Procedure

Fix Text

Document the requirement for a graphical user interface with the ISSO or set the default target to multi-user with the following command:

$ systemctl set-default multi-user.target

STIG check 100 of 439 in the Cloud Linux AlmaLinux OS 9 STIG checklist

← Previous · V-269205AlmaLinux OS 9 /etc/gshadow file must have mode 0000 or less permissive to prevent unauthorized access.Next · V-269207 →AlmaLinux OS 9 must disable the user list at logon for graphical user interfaces.