RHEL 9 effective dconf policy must match the policy keyfiles.
An XCCDF Rule
Description
Unlike text-based keyfiles, the binary database is impossible to check through most automated and all manual means; therefore, in order to evaluate dconf configuration, both have to be true at the same time - configuration files have to be compliant, and the database needs to be more recent than those keyfiles, which gives confidence that it reflects them.
- ID
- SV-258028r991589_rule
- Version
- RHEL-09-271090
- Severity
- Medium
- References
- Updated
Remediation Templates
A Manual Procedure
Update the dconf databases by running the following command:
$ sudo dconf update