Oracle Linux 8 Security Technical Implementation Guide

The Oracle Linux 8 Security Technical Implementation Guide (V2 R10) has 378 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

378STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V2 · R10

CurrentPublished Wed Sep 30 2026

The graphical display manager must not be installed on OL 8 unless approved.

Oracle Linux 8 Security Technical Implementation Guide

Assessment Title

Rule Text

The graphical display manager must not be installed on OL 8 unless approved.

Description

Discussion Text

Internet services that are not required for system or application processes must not be active to decrease the attack surface of the system. X Windows has a long history of security vulnerabilities and will not be used unless approved and documented.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-248898

Rule

SV-248898r991589_rule

Severity

medium

Rule Version

OL08-00-040320

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

Verify that if the system has a display server installed, it is authorized. 
 
Check for the display server package with the following example command: 
 
$ sudo rpm -qa | grep xorg | grep server 
 
Ask the System Administrator if use of the display server is an operational requirement. 
 
If the use of a display server on the system is not documented with the Information System Security Officer (ISSO), this is a finding.

Implementation Procedure

Fix Text

Document the requirement for a display server with the ISSO or remove the related packages with the following example command: 
 
$ sudo rpm -e xorg-x11-server-common

STIG check 336 of 378 in the Oracle Linux 8 STIG checklist

← Previous · V-248897The OL 8 file integrity tool must be configured to verify Access Control Lists (ACLs).Next · V-248899 →OL 8 network interfaces must not be in promiscuous mode.