RHEL7, multiple issues with gdm and disable-user-list
Crawford, Nicholas P CTR USARMY CERDEC (US)
nicholas.p.crawford.ctr at mail.mil
Mon Oct 27 04:08:10 UTC 2014
P { MARGIN-BOTTOM: 0px; MARGIN-TOP: 0px }
For those trying to implement login banners and have disabled the user-list feature, I've run in to a couple of issues.
1) With disable-user-list set, once the screen blanks the user is double prompted for a username to login. The first username prompt is ignored and will accept any text.
Bugzilla: https://bugzilla.redhat.com/show_bug.cgi?id=1157259
2) With disable-user-list set and a banner set, once the screen blanks the banner is lost upon waking the screen.
Bugzilla: https://bugzilla.redhat.com/show_bug.cgi?id=1157266
The only workaround I've found thus far is to disable session idle for GDM. The unfortunate side effect is the screen never blanks or turns off.
echo -e "[org/gnome/desktop/session]\nidle-delay=uint32 0" > /etc/dconf/db/gdm.d/00-fixgdm
echo "/org/gnome/desktop/session/idle-delay" > /etc/dconf/db/gdm.d/locks/00-fixgdm-locks
dconf update
-Nick
P.s. if you've already locked down your umask, verify all files are mode 0644, including /etc/dconf/db/gdm.
--
Nicholas P. Crawford
Senior UNIX Systems Administrator
contractor, General Dynamics Information Technology
NVESD Network Services Branch, US Army
email: Nicholas.Crawford at gdit.com
comm: (703) 704-2299 dsn: (312) 654-2299
cell: (571) 225-1283
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.fedorahosted.org/pipermail/scap-security-guide/attachments/20141027/95d8792c/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 3319 bytes
Desc: not available
URL: <https://lists.fedorahosted.org/pipermail/scap-security-guide/attachments/20141027/95d8792c/attachment.bin>
More information about the scap-security-guide
mailing list