STIGQter: STIG Summary: Xylok Security Suite 20.x Security Technical Implementation Guide Version: 1 Release: 2 Benchmark Date: 05 Jan 2026:

The Xylok Security Suite READONLY configuration must be True.

DISA Rule

SV-269578r1054098_rule

Vulnerability Number

V-269578

Group Title

SRG-APP-000133

Rule Version

XYLK-20-000052

Severity

CAT II

CCI(s)

• CCI-001499 - Limit privileges to change software resident within software libraries.

Weight

10

Fix Recommendation

Revert Xylok to its default read-only configuration:

1. As root, open /etc/xylok.conf in a text editor.

2. Add/Amend "READONLY=True" to the configuration file.

3. Restart Xylok to apply settings:

# systemctl restart xylok

Check Contents

Verify that Xylok's default read-only status is disabled by using the following command:

$ grep READONLY /etc/xylok.conf

If "READONLY" is set to False (case insensitive), is commented out or is missing, this is not a finding.

Vulnerability Number

V-269578

Documentable

False

Rule Version

XYLK-20-000052

Severity Override Guidance

Verify that Xylok's default read-only status is disabled by using the following command:

$ grep READONLY /etc/xylok.conf

If "READONLY" is set to False (case insensitive), is commented out or is missing, this is not a finding.

Check Content Reference

M

Target Key

5665