TOSS 5 must display the Standard Mandatory DoW or other applicable U.S. Government agency Notice and Consent Banner before granting local or remote access to the system via a graphical user login.

Display of a standardized and approved use notification before granting access to the operating system ensures privacy and security notification verbiage used is consistent with applicable federal laws, Executive Orders, directives, policies, regulations, standards, and guidance.

For U.S. Government systems, system use notifications are required only for access via login interfaces with human users and are not required when such human interfaces do not exist.

Satisfies: SRG-OS-000023-GPOS-00006, SRG-OS-000228-GPOS-00088

Verify TOSS 5 displays a banner before granting access to the operating system via a graphical user login.

Note: This requirement assumes the use of the TOSS 5 default graphical user interface—the GNOME desktop environment. If the system does not have a graphical user interface installed, this requirement is not applicable.

Determine if the operating system displays a banner at the login screen using the following command:

$ sudo grep banner-message-enable /etc/dconf/db/local.d/*

banner-message-enable=true

If "banner-message-enable" is set to "false", is commented out, or is missing, this is a finding.

Configure TOSS 5 to display the Standard Mandatory DoW or other applicable U.S. Government agency Notice and Consent Banner before granting access to the system via a graphical user login.

Create a database to contain the systemwide graphical user login settings (if it does not already exist) using the following command:

$ sudo touch /etc/dconf/db/local.d/01-banner-message

Add the following lines to the [org/gnome/login-screen] section of the "/etc/dconf/db/local.d/01-banner-message":

[org/gnome/login-screen]

banner-message-enable=true

Run the following command to update the database:

$ sudo dconf update