Skip to content

RHEL 9 effective dconf policy must match the policy keyfiles.

An XCCDF Rule

Description

Unlike text-based keyfiles, the binary database is impossible to check through most automated and all manual means; therefore, in order to evaluate dconf configuration, both have to be true at the same time - configuration files have to be compliant, and the database needs to be more recent than those keyfiles, which gives confidence that it reflects them.

ID
SV-258028r991589_rule
Version
RHEL-09-271090
Severity
Medium
References
Updated

Remediation Templates

A Manual Procedure

Update the dconf databases by running the following command:

$ sudo dconf update