About

Imported from CyberStrikeus/CyberStrike (.cyberstrike/skill/CIS_benchmarks/Cloud_Providers/Google_Cloud_Platform/cis-google-container-optimized-os/cis-gcp-cos-2.1.2/SKILL.md). Install upstream with npx skills add CyberStrikeus/CyberStrike --skill cis-gcp-cos-2.1.2. Copyright stays with the author.

2.1.2 Ensure X Window System is not installed (Automated)

Name: cis-gcp-cos-2.1.2
Author: CyberStrikeus

Description

The X Window System provides a Graphical User Interface (GUI) where users can have multiple windows in which to run programs and various add on. The X Windows system is typically used on workstations where users login, but not on servers where users typically do not login.

Rationale

Unless your organization specifically requires graphical login access via X Windows, remove it to reduce the potential attack surface.

Impact

Many Linux systems run applications which require a Java runtime. Some Linux Java packages have a dependency on specific X Windows xorg-x11-fonts. One workaround to avoid this dependency is to use the "headless" Java packages for your specific Java runtime, if provided by your distribution.

Audit Procedure

Verify X Windows System is not installed. The following command should return empty result.

# grep xorg /etc/cos-package-info.json

Expected Result

The command should return no output, confirming that X Window System packages are not installed.

Remediation

An OS image update that does not include X Window System is required.

CIS Controls

Controls Version	Control	IG 1	IG 2	IG 3
v8	2.3 Address Unauthorized Software - Ensure that unauthorized software is either removed from use on enterprise assets or receives a documented exception. Review monthly, or more frequently.	X	X	X
v7	2.6 Address unapproved software - Ensure that unauthorized software is either removed or the inventory is updated in a timely manner	X	X	X

Profile

Level 1 - Server

Use it

Copy one of these into your project. Installing also returns the manifest and these snippets.

yaml

targets:
  - https://api.opensmartroute.ai/api/v1/registry/cyberstrikeus-cyberstrike-cis-gcp-cos-2-1-2/manifest   # or paste the manifest below

Manifest

An Open Capability Manifest: the router reads it to know what this does, what it costs and when to pick it.

cyberstrikeus-cyberstrike-cis-gcp-cos-2-1-2.ocm.jsonjson

{
  "ocm": "1",
  "id": "cyberstrikeus-cyberstrike-cis-gcp-cos-2-1-2",
  "kind": "skill",
  "name": "cis-gcp-cos-2.1.2",
  "description": "Ensure X Window System is not installed",
  "publisher": "CyberStrikeus",
  "version": "1.0.0",
  "capabilities": {
    "domains": [
      "general"
    ],
    "tags": [
      "skill-md",
      "cis",
      "gcp",
      "container-optimized-os",
      "x-window",
      "services",
      "github"
    ],
    "languages": [
      "en"
    ]
  },
  "quality_prior": 0.6,
  "examples": [
    "Ensure X Window System is not installed"
  ],
  "primary": false,
  "metadata": {
    "source": {
      "provider": "github",
      "repository": "https://github.com/CyberStrikeus/CyberStrike",
      "path": ".cyberstrike/skill/CIS_benchmarks/Cloud_Providers/Google_Cloud_Platform/cis-google-container-optimized-os/cis-gcp-cos-2.1.2/SKILL.md",
      "ref": "df28ccd3dc6d6c02391169121ee2dcdf4a6a132b",
      "url": "https://github.com/CyberStrikeus/CyberStrike/blob/df28ccd3dc6d6c02391169121ee2dcdf4a6a132b/.cyberstrike/skill/CIS_benchmarks/Cloud_Providers/Google_Cloud_Platform/cis-google-container-optimized-os/cis-gcp-cos-2.1.2/SKILL.md",
      "key": "CyberStrikeus/CyberStrike/.cyberstrike/skill/CIS_benchmarks/Cloud_Providers/Google_Cloud_Platform/cis-google-container-optimized-os/cis-gcp-cos-2.1.2/SKILL.md"
    }
  },
  "instructions": "# 2.1.2 Ensure X Window System is not installed (Automated)\n\n## Description\n\nThe X Window System provides a Graphical User Interface (GUI) where users can have multiple windows in which to run programs and various add on. The X Windows system is typically used on workstations where users login, but not on servers where users typically do not login.\n\n## Rationale\n\nUnless your organization specifically requires graphical login access via X Windows, remove it to reduce the potential attack surface.\n\n## Impact\n\nMany Linux systems run applications which require a Java runtime. Some Linux Java packa",
  "cost": {
    "context_tokens": 544
  }
}

Fetch it by URL: GET /api/v1/registry/cyberstrikeus-cyberstrike-cis-gcp-cos-2-1-2/manifest?version=1.0.0

Reviews

Star ratings from people who tried it. One review per account; edit yours any time.

No reviews yet. Install it, try it, and be the first to rate it.