STIGQter: STIG Summary: Xylok Security Suite 20.x Security Technical Implementation Guide Version: 1 Release: 2 Benchmark Date: 05 Jan 2026:

The Xylok Security Suite configuration for DEBUG must be False.

DISA Rule

SV-269580r1053515_rule

Vulnerability Number

V-269580

Group Title

SRG-APP-000266

Rule Version

XYLK-20-000109

Severity

CAT II

CCI(s)

CCI-001312 - Generates error messages that provide information necessary for corrective actions without revealing information that could be exploited.

Weight

Fix Recommendation

Set DEBUG:

1. As root, open /etc/xylok.conf in a text editor.

2. Add/Amend "DEBUG=False" to the configuration file.

3. Restart Xylok to apply settings by executing the following:
# systemctl restart xylok

Check Contents

Verify DEBUG is configured. Execute the following:
$ grep DEBUG /etc/xylok.conf

DEBUG=False

If "DEBUG" is not set to False or is missing, this is a finding.

Vulnerability Number

V-269580

Documentable

False

Rule Version

XYLK-20-000109

Severity Override Guidance

Verify DEBUG is configured. Execute the following:
$ grep DEBUG /etc/xylok.conf

DEBUG=False

If "DEBUG" is not set to False or is missing, this is a finding.

Check Content Reference

Target Key

5665