Details

The SUSE operating system must display the Standard Mandatory DoD Notice and Consent Banner until users acknowledge the usage conditions and take explicit actions to log on for further access to the local graphical user interface (GUI).

Satisfies: SRG-OS-000023-GPOS-00006, SRG-OS-000024-GPOS-00007

Solution

Configure the SUSE operating system to display the Standard Mandatory DoD Notice and Consent Banner until users acknowledge the usage conditions and take explicit actions to log on for further access.

Note: If a graphical user interface is not installed, this requirement is Not Applicable.

Edit the file ‘/etc/gdm/Xsession’.

Add the following content to the file ‘/etc/gdm/Xsession’ below the line #!/bin/sh:

if ! zenity –text-info
–title ‘Consent’
–filename=/etc/gdm/banner
–no-markup
–checkbox=’Accept.’ 10 10; then
sleep 1;
exit 1;
fi

Save the file ‘/etc/gdm/Xsession’.

Supportive Information

The following resource is also helpful.

• https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_SLES_15_V1R3_STIG.ziphttps://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_SLES_15_V1R3_STIG.zip

This security hardening control applies to the following category of controls within NIST 800-53: Access Control.This control applies to the following type of system Unix.

References

• 800-53|AC-8a.
• 800-53|AC-8b.
• CAT|II
• CCI|CCI-000048
• CCI|CCI-000050
• Rule-ID|SV-234806r622137_rule
• STIG-ID|SLES-15-010050
• STIG-Legacy|SV-91745
• STIG-Legacy|V-77049
• Vuln-ID|V-234806

Source

• Tenable.com/audits