ansible-hardening/RHEL-07-010431.rst at 770b2ad86e5e188ea2fd415ef7a6f8e418bb315a

Files

Major Hayden e4d3ea4749 Add RHEL-07-010430 and RHEL-07-010431

This patch disables automatic and timed logins in gdm only if gdm
is installed and configured.

Implements: blueprint security-rhel7-stig
Change-Id: I34c1f91deb20441d8ca577f38d44c30c05718205

2016-11-01 18:07:07 +00:00

374 B

Raw Blame History

---id: RHEL-07-010431 status: implemented tag: graphical ---

If TimedLoginEnable=true exists in the gdm configuration file, /etc/gdm/custom.conf, the configuration will removed. This disallows timed logins for guest users in gdm.

Deployers can opt-out of this change by setting an Ansible variable:

security_disable_gdm_timed_login: no

374 B Raw Blame History

374 B

Raw Blame History