openstack/ansible-hardening
Code Issues Proposed changes

[Docs] Enable graphical login banner

Browse Source 
This patch provides documentation for the changes in:

  https://review.openstack.org/397246

Implements: blueprint security-rhel7-stig
Change-Id: If940e08c9abfaca10c09635f4fda67d64384791a
This commit is contained in:
Major Hayden
2016-11-18 13:51:27 -06:00
parent 04ff6e1c89
commit e84a295127
2 changed files with 30 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

28
doc/metadata/rhel7/RHEL-07-010030.rst
View File

@@ -1,7 +1,29 @@
--- ---
id: RHEL-07-010030 id: RHEL-07-010030
status: not implemented status: implemented
tag: misc tag: graphical
--- ---
This STIG requirement is not yet implemented. The tasks in the security role configure ``dconf`` to display a login banner
each time a graphical session starts on the system. The default banner message
set by the role is:
You are accessing a secured system and your actions will be logged along
with identifying information. Disconnect immediately if you are not an
authorized user of this system.
Deployers can customize this message by setting an Ansible variable:
.. code-block:: yaml
security_enable_graphical_login_message_text: >
This is a customized banner message.
.. warning::
The dconf configuration does not support multi-line strings. Ensure that
``security_enable_graphical_login_message_text`` contains a single line
of text.
In addition, deployers can opt out of displaying a login banner message by
changing ``security_enable_graphical_login_message`` to ``no``.

8
doc/metadata/rhel7/RHEL-07-010031.rst
View File

@@ -1,7 +1,9 @@
--- ---
id: RHEL-07-010031 id: RHEL-07-010031
status: not implemented status: implemented
tag: misc tag: graphical
--- ---
This STIG requirement is not yet implemented. This STIG control is implemented by:
* :ref:`stig-RHEL-07-010030`