Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add dconf_gnome_disable_user_list to the RHEL 9 STIG #9677

Conversation

Mab879
Copy link
Member

@Mab879 Mab879 commented Oct 12, 2022

Description:

  • Add policy-specific content to dconf_gnome_disable_user_list
  • Add dconf_gnome_disable_user_list to the RHEL 9 STIG

Rationale:

This rule should be in the STIG based on the RHEL 8 STIG.

@Mab879 Mab879 added Update Profile Issues or pull requests related to Profiles updates. STIG STIG Benchmark related. labels Oct 12, 2022
@Mab879 Mab879 added this to the 0.1.65 milestone Oct 12, 2022
@Mab879 Mab879 changed the title Add PSC for dconf_gnome_disable_user_list Add dconf_gnome_disable_user_list to the RHEL 9 STIG Oct 12, 2022
@github-actions
Copy link

Start a new ephemeral environment with changes proposed in this pull request:

Fedora Environment
Open in Gitpod

Oracle Linux 8 Environment
Open in Gitpod

@codeclimate
Copy link

codeclimate bot commented Oct 12, 2022

Code Climate has analyzed commit 7c8a04b and detected 0 issues on this pull request.

The test coverage on the diff in this pull request is 100.0% (50% is the threshold).

This pull request will bring the total coverage in the repository to 41.1% (0.0% change).

View more on Code Climate.

@marcusburghardt marcusburghardt self-assigned this Oct 13, 2022
Copy link
Member

@marcusburghardt marcusburghardt left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks @Mab879

Create a database to contain the system-wide screensaver settings (if it does not already exist) with the following command:
Note: The example below is using the database "local" for the system, so if the system is using another database in "/etc/dconf/profile/user", the file should be created under the appropriate subdirectory.

$ sudo touch /etc/dconf/db/local.d/02-login-screen
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Just for note, the rule remediation uses the 00-security-settings file name while the STIG asks the 02-login-screen file name. This is not an issue because the assessment is not fixed to any file name. So, all fine.

@marcusburghardt marcusburghardt merged commit c287849 into ComplianceAsCode:master Oct 13, 2022
@Mab879 Mab879 deleted the dconf_gnome_disable_user_list_rhel9_stig branch October 14, 2022 15:18
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
STIG STIG Benchmark related. Update Profile Issues or pull requests related to Profiles updates.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants