Hello Leland,
May I assume that this is one of your unacked/unnacked checks? I'm
going to read through the list carefully to hopefully uncover any
others you may have been referencing in the concall this morning.
I apologize that I didn't respond to this patch when you first
posted it, because I have been aware of this problem as a Linux
system administrator. GDM requires certain GConf settings to be
stored inside its user's home directory. When I tested your
revised instructions just now, GDM did not read the changes, and
the user list was not disabled. So in this particular case, I have
to NACK this patch. If you saw different behavior on your machine,
please let me know and I can try to work out why that might be.
There is a /var/lib/gdm/.gconf.mandatory directory which might
fulfill your requirement. I've tested the following, and this
command will disable the user list:
sudo gconftool-2 --direct --config-source
xml:readwrite:/var/lib/gdm/.gconf.mandatory --type bool --set
/apps/gdm/simple-greeter/disable_user_list true
This command writes to
/var/lib/gdm/.gconf.mandatory/%gconf-tree.xml.
Otherwise, I can write an oval check that matches the original
XCCDF prose, which I can also confirm does work on our operational
network. Please let me know which way you think we should go on
this. I think we can get a very quick turnaround on this.
- Maura Dailey
On 01/13/2014 10:11 AM, Steinke, Leland J Sr CTR DISA FSO (US)
wrote:
Ack/Nack?
Thanks,
Leland
-----Original Message-----
From: scap-security-guide-bounces@lists.fedorahosted.org [mailto:scap-
security-guide-bounces@lists.fedorahosted.org] On Behalf Of Steinke,
Leland J Sr CTR DISA FSO (US)
Sent: Monday, January 06, 2014 11:13 AM
To: scap-security-guide@lists.fedorahosted.org
Subject: [PATCH] update disable_user_list check and fix and add OVAL
This patch includes OVAL for the disable_user_list Rule. It also
updates the check and fix to look at the same thing.
Thanks,
Leland
--
Leland Steinke, Security+
DISA FSO Technical Support Contractor
tapestry technologies, Inc
717-267-5797 (DSN 570)
leland.j.steinke.ctr@mail.mil (gov't)
lsteinke@tapestrytech.com (com'l)
_______________________________________________
scap-security-guide mailing list
scap-security-guide@lists.fedorahosted.org
https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide