mediumsystemunverifiedrollback-safe
Enable DoD banner message for graphical logon
gdm-banner · RHEL ≥ 8 · 1 impl
Description
The GNOME Display Manager (GDM) must display the Standard Mandatory DoD Notice and Consent Banner before granting access via graphical logon. The banner-message-enable and banner-message-text dconf settings must be configured in the GDM profile.
Rationale
Displaying a consent banner before granting access informs users of the monitoring, recording, and access limitations applicable to that system. Failure to display the required logon banner prior to a logon attempt makes the system non-compliant with DoD requirements.
Check → Remediate
Checkcommand
if ! rpm -q gdm >/dev/null 2>&1; then exit 0; fi val=$(DCONF_PROFILE=/etc/dconf/profile/gdm dconf read /org/gnome/login-screen/banner-message-enable 2>/dev/null) [ "$val" = "true" ]
- expected_exit:
- 0
Remediatedconf_set
- schema:
- org/gnome/login-screen
- key:
- banner-message-enable
- value:
- true
- file:
- 00-security-settings
- db:
- gdm
- lock:
- true
Framework references
CIS
rhel8 1.8.1rhel9 1.8.2rhel10 1.8.1
STIG
V-244519 / RHEL-08-010049
NIST 800-53
AC-8CM-6
#gdm#graphical#banner#dod-consent#stig