LinuxQuestions.org
Help answer threads with 0 replies.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices


Reply
  Search this Thread
Old 03-05-2020, 11:40 PM   #1
Corrado
Member
 
Registered: Aug 2004
Location: Washington
Distribution: RHEL
Posts: 174

Rep: Reputation: 16
After setting STIG gdm does not start


On booting up a redhat 7 server, the Gnome Display Manager GDM does not start. A blank black screen appears.

The last thing to be done before it stopped working was applying a STIG to harden it. Which among the many STIGs which broke it is unknown.

On boot up am able to see that gdm attempted to start. I don't seen any errors in messages.

Was thinking that a change to ../dconf/local.d/db caused the problem. So I reinstalled package deconf and removed all those files - made no difference.

Don't think it is the graphical card because I am able to start a desktop with startx.

This really has me stumped. Suggestions?
 
Old 03-10-2020, 08:00 AM   #2
JZL240I-U
Senior Member
 
Registered: Apr 2003
Location: Germany
Distribution: openSuSE Tumbleweed-KDE, Mint 21, MX-21, Manjaro
Posts: 4,629

Rep: Reputation: Disabled
What is STIG? Do you need to run an old version of redhat like 7? Could you substitute GDM with e.g. SDDM?

Sorry for these vague answer, perhaps if you give more details somebody really knowledgeable can help you...
 
Old 03-10-2020, 08:18 AM   #3
sevendogsbsd
Senior Member
 
Registered: Sep 2017
Distribution: FreeBSD
Posts: 2,252

Rep: Reputation: 1011Reputation: 1011Reputation: 1011Reputation: 1011Reputation: 1011Reputation: 1011Reputation: 1011Reputation: 1011
STIG is US goverernmentese for "Security Technical Implementation Guidelines" and is a hardening guide. Some are OK, some have been put together by people in a closed environment that have no clue. I am not familiar with the Red hat one, only the web app one so can't speak to the Red Hat one.

Back off the changes you made until you find which one caused the issue and then add that change to a POA&M.
 
Old 03-10-2020, 05:21 PM   #4
Corrado
Member
 
Registered: Aug 2004
Location: Washington
Distribution: RHEL
Posts: 174

Original Poster
Rep: Reputation: 16
With over 100 changes made, haven't been able to find which one broke it. Which STIG could potentially break gdm?

I had thought reverting the changes in /etc/dconf/local.d/db would fix things. It didn't.
 
Old 01-08-2021, 12:01 PM   #5
rmmcbride
LQ Newbie
 
Registered: Jan 2021
Posts: 1

Rep: Reputation: Disabled
Lightbulb Here is what fixed it on my system

Unsure if this is what your issue is but could be related. I had commented the line in /etc/pam.d/postlogin that was listed as optional and didn't meet the STIG setting. After uncommenting the line back to the original, the GUI started fine.

Hope this helps.
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Red Hat 7 STIG on CentOS itayuman Linux - Security 19 11-07-2019 10:31 AM
Can't find CentOS STIG referenced in DISA STIG security profile Chantillian Linux - Security 1 03-16-2018 09:37 AM
DISA STIG Compliance Scripts/RPM's zcrxsir88 Linux - Security 21 03-17-2017 12:32 PM
RHEL 7 Audit Rule configuration question from DISA STIG dc071 Linux - Security 3 11-20-2016 09:52 AM
DISA STIG (Gold Disk can not find %systemroot%domainfwname.log on mcrsft wndws xp) Reeder General 3 05-12-2010 07:54 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Security

All times are GMT -5. The time now is 01:06 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration