The VNC server package must not be installed unless required.
Severity | Group ID | Group Title | Version | Rule ID | Date | STIG Version |
|---|---|---|---|---|---|---|
| medium | V-216295 | SRG-OS-000480 | SOL-11.1-020180 | SV-216295r959010_rule | 2026-02-19 | 3 |
Description
The VNC service uses weak authentication capabilities and provides the user complete graphical system access.
ℹ️ Check
Determine if the VNC server package is installed.
# pkg list x11/server/xvnc
If an installed package named "x11/server/xvnc is listed" is listed, this is a finding.
✔️ Fix
The Software Installation Profile is required.
# pfexec pkg uninstall x11/server/xvnc