{"description": "By default, <tt>GNOME</tt> enables a power profile designed for mobile devices\nwith battery usage. While useful for mobile devices, this setting should be disabled\nfor all other systems. To configure the system to disable the power setting, add or set\n<tt>active</tt> to <tt>false</tt> in\n<tt>/etc/dconf/db/local.d/00-security-settings</tt>. For example:\n<pre>[org/gnome/settings-daemon/plugins/power]\nactive=false\n</pre>\nOnce the settings have been added, add a lock to\n<tt>/etc/dconf/db/local.d/locks/00-security-settings-lock</tt> to prevent user modification.\nFor example:\n<pre>/org/gnome/settings-daemon/plugins/power</pre>\nAfter the settings have been set, run <tt>dconf update</tt>.", "rationale": "Power settings should not be enabled on systems that are not mobile devices.\nEnabling power settings on non-mobile devices could have unintended processing\nconsequences on standard systems.", "severity": "medium", "references": {}, "control_references": {}, "components": [], "identifiers": {}, "ocil_clause": "power settings are enabled and are not disabled", "ocil": "To ensure that the GUI power settings are not active, run the following command:\n<pre>$ gsettings get org.gnome.settings-daemon.plugins.power active</pre>\nIf properly configured, the output should be <tt>false</tt>.\nTo ensure that users cannot enable the power settings, run the following:\n<pre>$ grep power /etc/dconf/db/local.d/locks/*</pre>\nIf properly configured, the output should be\n<tt>/org/gnome/settings-daemon/plugins/power/active</tt>", "oval_external_content": null, "fixtext": "", "checktext": "", "vuldiscussion": "", "srg_requirement": "", "warnings": [], "conflicts": [], "requires": [], "policy_specific_content": {}, "platform": null, "platforms": [], "sce_metadata": {}, "inherited_platforms": ["package[gdm]"], "cpe_platform_names": [], "inherited_cpe_platform_names": ["package_gdm"], "bash_conditional": null, "fixes": {}, "title": "Disable Power Settings in GNOME3", "definition_location": "/aptdata/openscap/scap-security-guide/linux_os/guide/system/software/gnome/gnome_system_settings/dconf_gnome_disable_power_settings/rule.yml", "template": null}