STIGQter: STIG Summary: Oracle Linux 9 Security Technical Implementation Guide Version: 1 Release: 6 Benchmark Date: 01 Jul 2026:

OL 9 must disable the graphical user interface autorun function unless required.

DISA Rule

SV-271671r1091725_rule

Vulnerability Number

V-271671

Group Title

SRG-OS-000368-GPOS-00154

Rule Version

OL09-00-002101

Severity

CAT II

CCI(s)

CCI-001764 - Prevent program execution in accordance with organization-defined policies, rules of behavior, and/or access agreements regarding software program usage and restrictions; rules authorizing the terms and conditions of software program usage.

Weight

Fix Recommendation

Configure the GNOME desktop to disable the autorun function on removable media.

The dconf settings can be edited in the /etc/dconf/db/* location.

Update the [org/gnome/desktop/media-handling] section of the "/etc/dconf/db/local.d/00-security-settings" database file and add or update the following lines:

[org/gnome/desktop/media-handling]
autorun-never=true

Update the dconf system databases:

$ sudo dconf update

Check Contents

This requirement assumes the use of the OL 9 default graphical user interface—the GNOME desktop environment. If the system does not have any graphical user interface installed, this requirement is Not Applicable.

Verify that OL 9 disables the graphical user interface autorun function with the following command:

$ gsettings get org.gnome.desktop.media-handling autorun-never
true

If "autorun-never" is set to "false", and is not documented with the information system security officer (ISSO) as an operational requirement, this is a finding.

Vulnerability Number

V-271671

Documentable

False

Rule Version

OL09-00-002101

Severity Override Guidance

Check Content Reference

Target Key

5680