RHEL7, multiple issues with gdm and disable-user-list

Crawford, Nicholas P CTR USARMY CERDEC (US) nicholas.p.crawford.ctr at mail.mil
Mon Oct 27 04:08:10 UTC 2014


P { MARGIN-BOTTOM: 0px; MARGIN-TOP: 0px }   


For those trying to implement login banners and have disabled the user-list feature, I've run in to a couple of issues.

 

1)  With disable-user-list set, once the screen blanks the user is double prompted for a username to login.  The first username prompt is ignored and will accept any text.

 

Bugzilla: https://bugzilla.redhat.com/show_bug.cgi?id=1157259

 

2) With disable-user-list set and a banner set, once the screen blanks the banner is lost upon waking the screen.

 

Bugzilla: https://bugzilla.redhat.com/show_bug.cgi?id=1157266

 

The only workaround I've found thus far is to disable session idle for GDM.  The unfortunate side effect is the screen never blanks or turns off.

 

echo -e "[org/gnome/desktop/session]\nidle-delay=uint32 0" > /etc/dconf/db/gdm.d/00-fixgdm
echo "/org/gnome/desktop/session/idle-delay" > /etc/dconf/db/gdm.d/locks/00-fixgdm-locks
dconf update

 

-Nick

 

P.s. if you've already locked down your umask, verify all files are mode 0644, including /etc/dconf/db/gdm.

 


--

Nicholas P. Crawford

Senior UNIX Systems Administrator

contractor, General Dynamics Information Technology

NVESD Network Services Branch, US Army

email: Nicholas.Crawford at gdit.com

comm: (703) 704-2299 dsn: (312) 654-2299

cell: (571) 225-1283
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.fedorahosted.org/pipermail/scap-security-guide/attachments/20141027/95d8792c/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 3319 bytes
Desc: not available
URL: <https://lists.fedorahosted.org/pipermail/scap-security-guide/attachments/20141027/95d8792c/attachment.bin>


More information about the scap-security-guide mailing list