UCF STIG Viewer Logo
Changes are coming to https://stigviewer.com. Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey

A login banner must be displayed immediately prior to, or as part of, graphical desktop environment login prompts.


Overview

Finding ID Version Rule ID IA Controls Severity
V-38688 RHEL-06-000324 SV-50489r3_rule Medium
Description
An appropriate warning message reinforces policy awareness during the logon process and facilitates possible legal action against attackers.
STIG Date
Red Hat Enterprise Linux 6 Security Technical Implementation Guide 2018-03-01

Details

Check Text ( C-46250r3_chk )
If the GConf2 package is not installed, this is not applicable.

To ensure a login warning banner is enabled, run the following:

$ gconftool-2 --direct --config-source xml:readwrite:/etc/gconf/gconf.xml.mandatory --get /apps/gdm/simple-greeter/banner_message_enable

Search for the "banner_message_enable" schema. If properly configured, the "default" value should be "true".
If it is not, this is a finding.
Fix Text (F-43637r2_fix)
To enable displaying a login warning banner in the GNOME Display Manager's login screen, run the following command:

# gconftool-2 --direct \
--config-source xml:readwrite:/etc/gconf/gconf.xml.mandatory \
--type bool \
--set /apps/gdm/simple-greeter/banner_message_enable true

To display a banner, this setting must be enabled and then banner text must also be set.