STIGUI
V-280950CAT II — Medium severitySV-280950r1165205_rule

RHEL 10 must not have the "gdm" package installed.

Rule version RHEL-10-200080 · STIG v1 · 2026-09-17

Discussion

Unnecessary service packages must not be installed to decrease the attack surface of the system. A graphical environment is unnecessary for certain types of systems including a virtualization hypervisor.

Check

Verify RHEL 10 does not have the "gdm" package installed with the following command:

$ sudo dnf list --installed gdm Error: No matching Packages to list

If the "gdm" package is installed and the need for a GUI interface has not been documented with the information system security officer, this is a finding.

Fix

Configure RHEL 10 to not have the "gdm" package installed with the following command:

$ sudo dnf -y remove gdm

Identifiers

Group ID
V-280950
Group title
SRG-OS-000095-GPOS-00049
Rule ID
SV-280950r1165205_rule
Check ID
C-85511r1165203_chk
Fix ID
F-85416r1165204_fix