P { MARGIN-BOTTOM: 0px; MARGIN-TOP: 0px }   

For those trying to implement login banners and have disabled the user-list 
feature, I've run in to a couple of issues.

 

1)  With disable-user-list set, once the screen blanks the user is double 
prompted for a username to login.  The first username prompt is ignored and 
will accept any text.

 

Bugzilla: https://bugzilla.redhat.com/show_bug.cgi?id=1157259

 

2) With disable-user-list set and a banner set, once the screen blanks the 
banner is lost upon waking the screen.

 

Bugzilla: https://bugzilla.redhat.com/show_bug.cgi?id=1157266

 

The only workaround I've found thus far is to disable session idle for GDM.  
The unfortunate side effect is the screen never blanks or turns off.

 

echo -e "[org/gnome/desktop/session]\nidle-delay=uint32 0" > 
/etc/dconf/db/gdm.d/00-fixgdm
echo "/org/gnome/desktop/session/idle-delay" > 
/etc/dconf/db/gdm.d/locks/00-fixgdm-locks
dconf update

 

-Nick

 

P.s. if you've already locked down your umask, verify all files are mode 0644, 
including /etc/dconf/db/gdm.

 


--

Nicholas P. Crawford

Senior UNIX Systems Administrator

contractor, General Dynamics Information Technology

NVESD Network Services Branch, US Army

email: [email protected]

comm: (703) 704-2299 dsn: (312) 654-2299

cell: (571) 225-1283

Attachment: smime.p7s
Description: S/MIME cryptographic signature

-- 
SCAP Security Guide mailing list
[email protected]
https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide
https://github.com/OpenSCAP/scap-security-guide/

Reply via email to