Hello,

Missed this section...

On Monday, February 24, 2014 06:07:22 PM Maura Dailey wrote:
> On a related note, the login banner text only displays AFTER users have 
> put in their user name, and there appears to be no way to edit the 
> consent banner's appearance without altering the GDM theme. Instead, 
> it's scrunched into a tiny window, with tiny grey text on a grey 
> background, with a scroll bar. Is it too late to put this on my RHEL 7 
> final release wish list or can someone point me to the correct settings?

There are a couple settings here that we care about. One is you need to do 
this to to avoid leaking accounts:

disable-user-list=true

I know the gnome developers were concerned about the real estate available 
when the user list was being shown + a banner. Not sure how it finally ended up 
as I recall hearing them say they might kick it to an interstitial screen if 
there was not enough room because the text was too large or users were being 
displayed.

That said, when I worked at NASA, we had machines where you logged in, it went 
to an interstitial page where you accepted the consent to be monitored, and if 
not it kicked you back to the login screen. If you accepted, you got the whole 
CDE desktop. The point being that you couldn't do any real work until you 
accepted and it did kick you out such that you couldn't do anything unless you 
accepted. So, if gnome follows that...it might be different than rhel6, but 
still valid as a work flow.

-Steve
_______________________________________________
scap-security-guide mailing list
[email protected]
https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide

Reply via email to