Enable a Warning Banner for the GNOME Service

LowLevel 1Automatedsolaris

Description

The GNOME Display Manager is used for login session management. See the manual page gdm(1) for more information on configuration of the settings, which can be user or group specific. The remediation action for this item sets a pre-login warning message for GDM users. Additional methods can be employed to display a similar message to a user post- authentication. For more information, see the Oracle Solaris 11 Security Guidelines document. Audit: only evaluated where GDM is installed.

How it is checked

Audit method: File pattern

File: /etc/gdm/Init/Default
Pattern: --title="Security Message" --filename=/etc/issue

How it is fixed

Fix method: Guidance or infrastructure patch

Perform the following to implement the recommended state: Edit the /etc/gdm/Init/Default file to add the following content before the last line of the file. /usr/bin/zenity --text-info --width=800 --height=300 --title="Security Message" --filename=/etc/issue

Properties

Operating systems: Any
Tags: solarisservices
Reference: CIS Oracle Solaris 11.4 Benchmark v1.1.0 - 8.4 Enable a Warning Banner for the GNOME Service

Check this host

Run this on a machine you are allowed to audit. The scan is read-only.

shell

tmaegis scan --target solaris