P { MARGIN-BOTTOM: 0px; MARGIN-TOP: 0px }
For those trying to implement login banners and have disabled the user-list feature, I've run in to a couple of issues.
1) With disable-user-list set, once the screen blanks the user is double prompted for a username to login. The first username prompt is ignored and will accept any text.
Bugzilla: https://bugzilla.redhat.com/show_bug.cgi?id=1157259
2) With disable-user-list set and a banner set, once the screen blanks the banner is lost upon waking the screen.
Bugzilla: https://bugzilla.redhat.com/show_bug.cgi?id=1157266
The only workaround I've found thus far is to disable session idle for GDM. The unfortunate side effect is the screen never blanks or turns off.
echo -e "[org/gnome/desktop/session]\nidle-delay=uint32 0" > /etc/dconf/db/gdm.d/00-fixgdm echo "/org/gnome/desktop/session/idle-delay" > /etc/dconf/db/gdm.d/locks/00-fixgdm-locks dconf update
-Nick
P.s. if you've already locked down your umask, verify all files are mode 0644, including /etc/dconf/db/gdm.
--
Nicholas P. Crawford
Senior UNIX Systems Administrator
contractor, General Dynamics Information Technology
NVESD Network Services Branch, US Army
email: Nicholas.Crawford@gdit.com
comm: (703) 704-2299 dsn: (312) 654-2299
cell: (571) 225-1283
scap-security-guide@lists.fedorahosted.org