← Back to Rancher Government Solutions (RGS) Harvester Government GPOS Security Technical Implementation Guide

V-285670

CAT II (Medium)

The operating system must restrict the use of system control mechanisms capable of interrupting or altering system operation.

Rule ID

SV-285670r1272122_rule

STIG

Rancher Government Solutions (RGS) Harvester Government GPOS Security Technical Implementation Guide

Version

V1R1

CCIs

CCI-001084

Discussion

System control mechanisms capable of initiating restart or shutdown actions can disrupt system operation and availability if improperly controlled. Unauthorized use of these functions may interrupt services or impact mission operations. Restricting access to system control functions reduces the risk of accidental or malicious system disruption.

Check Content

Verify the operating system prevents use of the Ctrl+Alt+Del key sequence from initiating system reboot actions.

1. Access the operating system using a privileged account and run:

systemctl status ctrl-alt-del.target

2. Verify the output contains:

Loaded: masked (/dev/null; bad)

If "ctrl-alt-del.target" is enabled, disabled, static, or returns a value other than masked, this is a finding.

Fix Text

Ensure Harvester Government platform is running in its default configuration. 

1. Attempt to reboot the node to restore the original, immutable settings. Run the script again and check for failures.

2. If any checks return a "FAIL" status, upgrade or reinstall Harvester Government platform in its default configuration.