STIGQter: STIG Summary: Oracle Linux 6 Security Technical Implementation Guide Version: 2 Release: 3 Benchmark Date: 23 Apr 2021:

A login banner must be displayed immediately prior to, or as part of, graphical desktop environment login prompts.

DISA Rule

SV-209034r603263_rule

Vulnerability Number

V-209034

Group Title

SRG-OS-000024

Rule Version

OL6-00-000324

Severity

CAT II

CCI(s)

• CCI-000050 - The information system retains the notification message or banner on the screen until users acknowledge the usage conditions and take explicit actions to log on to or further access the information system.

Weight

10

Fix Recommendation

To enable displaying a login warning banner in the GNOME Display Manager's login screen, run the following command:

# gconftool-2 --direct \
--config-source xml:readwrite:/etc/gconf/gconf.xml.mandatory \
--type bool \
--set /apps/gdm/simple-greeter/banner_message_enable true

To display a banner, this setting must be enabled and then banner text must also be set.

Check Contents

If the GConf2 package is not installed, this is not applicable.

To ensure a login warning banner is enabled, run the following:

$ gconftool-2 --direct --config-source xml:readwrite:/etc/gconf/gconf.xml.mandatory --get /apps/gdm/simple-greeter/banner_message_enable

Search for the "banner_message_enable" schema. If properly configured, the "default" value should be "true".

If it is not, this is a finding.

Vulnerability Number

V-209034

Documentable

False

Rule Version

OL6-00-000324

Severity Override Guidance

If the GConf2 package is not installed, this is not applicable.

To ensure a login warning banner is enabled, run the following:

$ gconftool-2 --direct --config-source xml:readwrite:/etc/gconf/gconf.xml.mandatory --get /apps/gdm/simple-greeter/banner_message_enable

Search for the "banner_message_enable" schema. If properly configured, the "default" value should be "true".

If it is not, this is a finding.

Check Content Reference

M

Target Key

2928

Comments