STIGQter: STIG Summary: Red Hat Enterprise Linux 9 Security Technical Implementation Guide Version: 2 Release: 9 Benchmark Date: 01 Jul 2026:

RHEL 9 must disable the graphical user interface autorun function unless required.

DISA Rule

SV-258016r958804_rule

Vulnerability Number

V-258016

Group Title

SRG-OS-000368-GPOS-00154

Rule Version

RHEL-09-271030

Severity

CAT II

CCI(s)

CCI-001764 - Prevent program execution in accordance with organization-defined policies, rules of behavior, and/or access agreements regarding software program usage and restrictions; rules authorizing the terms and conditions of software program usage.

Weight

Fix Recommendation

Configure the GNOME desktop to disable the autorun function on removable media.

The dconf settings can be edited in the /etc/dconf/db/* location.

Update the [org/gnome/desktop/media-handling] section of the "/etc/dconf/db/local.d/00-security-settings" database file and add or update the following lines:

[org/gnome/desktop/media-handling]
autorun-never=true

Then update the dconf system databases:

$ sudo dconf update

Check Contents

Verify RHEL 9 disables the graphical user interface autorun function with the following command:

Note: This requirement assumes the use of the RHEL 9 default graphical user interface, the GNOME desktop environment. If the system does not have any graphical user interface installed, this requirement is Not Applicable.

$ gsettings get org.gnome.desktop.media-handling autorun-never

true

If "autorun-never" is set to "false", and is not documented with the information system security officer (ISSO) as an operational requirement, this is a finding.

Vulnerability Number

V-258016

Documentable

False

Rule Version

RHEL-09-271030

Severity Override Guidance

Check Content Reference

Target Key

5551