← All control domains
GNOME desktop (dconf): 19 controls for Linux hardening
Pavois audits 19 controls in the GNOME desktop (dconf) hardening domain, across 9 systems and 4 standards (CIS, NIST 800-53, PCI DSS, DISA STIG). Every control declares the evidence it gathers, its severity, its remediation and its standard references.
The domain in figures
| Controls | 19 |
| Severities | |
| Evidence gathered | |
| Standards | |
| Systems | Debian 12Debian 13FedoraRHEL 10 / Rocky 10 / AlmaLinux 10RHEL 8 / Rocky 8 / AlmaLinux 8RHEL 9 / Rocky 9 / AlmaLinux 9Ubuntu 22.04Ubuntu 24.04Ubuntu 26.04 |
| Coverage depth | in depth |
What does Pavois check in this domain?
- persistent config 19
- Checked against the content of a persistent configuration file, the source of truth that survives reboots.
Which standards does this domain cover?
One effective-configuration check serves as evidence for several standards at once. The references below are the ones the corpus actually carries, never a claimed equivalence. how to read a standard mapping.
- CIS
- 1.7.2, 1.7.3, 1.7.4, 1.7.5, 1.7.6, 1.7.7, 1.7.8, 1.7.9, 1.8.1, 1.8.2, 1.8.3, 1.8.4, 1.8.5, 1.8.6, 1.8.8, 3.4.2, 8.2.8
- NIST 800-53
- 3.1.2, 3.1.7, 3.1.8, 3.1.9, 3.1.10, AC-6(1), AC-8(a), AC-8(b), AC-8(c), AC-11(1), AC-11(1).1, AC-11(a), AC-23, CM-6(a), CM-7(a), CM-7(b)
- PCI DSS
- 3.4.2, 8.2.8
- DISA STIG
- UBTU-22-271010, UBTU-22-271020, UBTU-22-271025, UBTU-22-271030, UBTU-24-200020, UBTU-24-200040, UBTU-24-200041, UBTU-24-200042, UBTU-24-200043, UBTU-24-200650, UBTU-24-300025