Files
ansible-hardening/doc/metadata/rhel7/RHEL-07-010431.rst
Major Hayden e4d3ea4749 Add RHEL-07-010430 and RHEL-07-010431
This patch disables automatic and timed logins in gdm only if gdm
is installed and configured.

Implements: blueprint security-rhel7-stig
Change-Id: I34c1f91deb20441d8ca577f38d44c30c05718205
2016-11-01 18:07:07 +00:00

16 lines
374 B
ReStructuredText

---
id: RHEL-07-010431
status: implemented
tag: graphical
---
If ``TimedLoginEnable=true`` exists in the gdm configuration file,
``/etc/gdm/custom.conf``, the configuration will removed. This disallows timed
logins for guest users in gdm.
Deployers can opt-out of this change by setting an Ansible variable:
.. code-block:: yaml
security_disable_gdm_timed_login: no