A login banner must be displayed immediately prior to, or as part of, graphical desktop environment login prompts.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-51123	OL6-00-000324	SV-65333r1_rule		Medium

Description
An appropriate warning message reinforces policy awareness during the logon process and facilitates possible legal action against attackers.

STIG	Date
Oracle Linux 6 Security Technical Implementation Guide	2014-06-12

Details

Check Text ( C-53525r1_chk )
To ensure a login warning banner is enabled, run the following: $ gconftool-2 --direct --config-source xml:readwrite:/etc/gconf/gconf.xml.mandatory --get /apps/gdm/simple-greeter/banner_message_enable Search for the "banner_message_enable" schema. If properly configured, the "default" value should be "true". If it is not, this is a finding.

Fix Text (F-55931r1_fix)
To enable displaying a login warning banner in the GNOME Display Manager's login screen, run the following command: sudo -u gdm gconftool-2 \ --type bool \ --set /apps/gdm/simple-greeter/banner_message_enable true To display a banner, this setting must be enabled and then banner text must also be set.