The systemd Ctrl-Alt-Delete burst key sequence in TOSS must be disabled.
An XCCDF Rule
Description
A locally logged-on user who presses Ctrl-Alt-Delete when at the console can reboot the system. If accidentally pressed, as could happen in the case of a mixed OS environment, this can create the risk of short-term loss of availability of systems due to unintentional reboot. In a graphical user environment, risk of unintentional reboot from the Ctrl-Alt-Delete sequence is reduced because the user will be prompted before any action is taken.
- ID
- SV-252938r991589_rule
- Version
- TOSS-04-010360
- Severity
- High
- References
- Updated
Remediation Templates
A Manual Procedure
Configure the system to disable the CtrlAltDelBurstAction by added or modifying the following line in the "/etc/systemd/system.conf" configuration file:
CtrlAltDelBurstAction=none
Reload the daemon for this change to take effect.
$ sudo systemctl daemon-reload