disable-user-list has been set to true in my testing, and the box is
still ridiculously tiny and at the very bottom of the screen. I wouldn't
mind an interstitial screen, actually, because it would probably mean
the text could be displayed with the same size font as the login
prompts. The security auditors around here prefer to see the banner
before the user login process begins. It's the way that RHEL 6, Mac OS
X, and Windows handles it currently. That doesn't mean I can't talk them
around to showing it halfway through the process, but it is irksome that
Gnome 3 is switching the order around, apparently for aesthetics.
I did file an RFE, if only to get some official suggestions, but I'm
going to start pursuing how much of the appearance is controlled by the
theme and how much is configurable. Making the text a brighter color
instead of a light grey would be a huge improvement all by itself.
However, if the box size is not configurable, then making the text
bigger might be painful to scroll through.
- Maura Dailey
On 02/24/2014 07:33 PM, Steve Grubb wrote:
Hello,
Missed this section...
On Monday, February 24, 2014 06:07:22 PM Maura Dailey wrote:
> On a related note, the login banner text only displays AFTER users have
> put in their user name, and there appears to be no way to edit the
> consent banner's appearance without altering the GDM theme. Instead,
> it's scrunched into a tiny window, with tiny grey text on a grey
> background, with a scroll bar. Is it too late to put this on my RHEL 7
> final release wish list or can someone point me to the correct settings?
There are a couple settings here that we care about. One is you need to do
this to to avoid leaking accounts:
disable-user-list=true
I know the gnome developers were concerned about the real estate available
when the user list was being shown + a banner. Not sure how it finally ended up
as I recall hearing them say they might kick it to an interstitial screen if
there was not enough room because the text was too large or users were being
displayed.
That said, when I worked at NASA, we had machines where you logged in, it went
to an interstitial page where you accepted the consent to be monitored, and if
not it kicked you back to the login screen. If you accepted, you got the whole
CDE desktop. The point being that you couldn't do any real work until you
accepted and it did kick you out such that you couldn't do anything unless you
accepted. So, if gnome follows that...it might be different than rhel6, but
still valid as a work flow.
-Steve