|
|
0d5c10 |
commit 23e988daddbaec48ad565eef28c45d858587a45c
|
|
|
0d5c10 |
Author: Gabriel Becker <ggasparb@redhat.com>
|
|
|
0d5c10 |
Date: Fri May 24 13:56:54 2019 +0200
|
|
|
0d5c10 |
|
|
|
0d5c10 |
Remove dconf_use_text_backend rule from profiles.
|
|
|
0d5c10 |
|
|
|
0d5c10 |
Rule is faulty and does not fix properly the dconf bugs.
|
|
|
0d5c10 |
|
|
|
0d5c10 |
diff --git a/fedora/profiles/ospp.profile b/fedora/profiles/ospp.profile
|
|
|
0d5c10 |
index f13f97a..f33d348 100644
|
|
|
0d5c10 |
--- a/fedora/profiles/ospp.profile
|
|
|
0d5c10 |
+++ b/fedora/profiles/ospp.profile
|
|
|
0d5c10 |
@@ -43,7 +43,6 @@ selections:
|
|
|
0d5c10 |
- sysctl_kernel_kptr_restrict
|
|
|
0d5c10 |
- sysctl_kernel_kexec_load_disabled
|
|
|
0d5c10 |
- sysctl_kernel_dmesg_restrict
|
|
|
0d5c10 |
- - dconf_use_text_backend
|
|
|
0d5c10 |
- dconf_gnome_screensaver_idle_activation_enabled
|
|
|
0d5c10 |
- dconf_gnome_screensaver_idle_delay
|
|
|
0d5c10 |
- dconf_gnome_screensaver_lock_delay
|
|
|
0d5c10 |
diff --git a/fedora/profiles/pci-dss.profile b/fedora/profiles/pci-dss.profile
|
|
|
0d5c10 |
index 0e6f543..5e47534 100644
|
|
|
0d5c10 |
--- a/fedora/profiles/pci-dss.profile
|
|
|
0d5c10 |
+++ b/fedora/profiles/pci-dss.profile
|
|
|
0d5c10 |
@@ -98,7 +98,6 @@ selections:
|
|
|
0d5c10 |
- account_disable_post_pw_expiration
|
|
|
0d5c10 |
- accounts_passwords_pam_faillock_deny
|
|
|
0d5c10 |
- accounts_passwords_pam_faillock_unlock_time
|
|
|
0d5c10 |
- - dconf_use_text_backend
|
|
|
0d5c10 |
- dconf_gnome_screensaver_idle_delay
|
|
|
0d5c10 |
- dconf_gnome_screensaver_idle_activation_enabled
|
|
|
0d5c10 |
- dconf_gnome_screensaver_lock_enabled
|
|
|
0d5c10 |
diff --git a/linux_os/guide/system/software/gnome/gnome_login_screen/dconf_gnome_disable_restart_shutdown/rule.yml b/linux_os/guide/system/software/gnome/gnome_login_screen/dconf_gnome_disable_restart_shutdown/rule.yml
|
|
|
0d5c10 |
index c418384..28a39e8 100644
|
|
|
0d5c10 |
--- a/linux_os/guide/system/software/gnome/gnome_login_screen/dconf_gnome_disable_restart_shutdown/rule.yml
|
|
|
0d5c10 |
+++ b/linux_os/guide/system/software/gnome/gnome_login_screen/dconf_gnome_disable_restart_shutdown/rule.yml
|
|
|
0d5c10 |
@@ -28,10 +28,6 @@ rationale: |-
|
|
|
0d5c10 |
|
|
|
0d5c10 |
severity: high
|
|
|
0d5c10 |
|
|
|
0d5c10 |
-warnings:
|
|
|
0d5c10 |
- - dependency: |-
|
|
|
0d5c10 |
- {{{ body_of_dconf_warning_about_dependent_rule() }}}
|
|
|
0d5c10 |
-
|
|
|
0d5c10 |
identifiers:
|
|
|
0d5c10 |
cce@rhel7: 80107-6
|
|
|
0d5c10 |
|
|
|
0d5c10 |
diff --git a/linux_os/guide/system/software/gnome/gnome_login_screen/dconf_gnome_disable_user_list/rule.yml b/linux_os/guide/system/software/gnome/gnome_login_screen/dconf_gnome_disable_user_list/rule.yml
|
|
|
0d5c10 |
index 1b3a0d3..bc15a48 100644
|
|
|
0d5c10 |
--- a/linux_os/guide/system/software/gnome/gnome_login_screen/dconf_gnome_disable_user_list/rule.yml
|
|
|
0d5c10 |
+++ b/linux_os/guide/system/software/gnome/gnome_login_screen/dconf_gnome_disable_user_list/rule.yml
|
|
|
0d5c10 |
@@ -27,10 +27,6 @@ rationale: |-
|
|
|
0d5c10 |
|
|
|
0d5c10 |
severity: medium
|
|
|
0d5c10 |
|
|
|
0d5c10 |
-warnings:
|
|
|
0d5c10 |
- - dependency: |-
|
|
|
0d5c10 |
- {{{ body_of_dconf_warning_about_dependent_rule() }}}
|
|
|
0d5c10 |
-
|
|
|
0d5c10 |
identifiers:
|
|
|
0d5c10 |
cce@rhel7: 80106-8
|
|
|
0d5c10 |
|
|
|
0d5c10 |
diff --git a/linux_os/guide/system/software/gnome/gnome_login_screen/dconf_gnome_enable_smartcard_auth/rule.yml b/linux_os/guide/system/software/gnome/gnome_login_screen/dconf_gnome_enable_smartcard_auth/rule.yml
|
|
|
0d5c10 |
index a9d157d..e3f5e79 100644
|
|
|
0d5c10 |
--- a/linux_os/guide/system/software/gnome/gnome_login_screen/dconf_gnome_enable_smartcard_auth/rule.yml
|
|
|
0d5c10 |
+++ b/linux_os/guide/system/software/gnome/gnome_login_screen/dconf_gnome_enable_smartcard_auth/rule.yml
|
|
|
0d5c10 |
@@ -26,10 +26,6 @@ rationale: |-
|
|
|
0d5c10 |
|
|
|
0d5c10 |
severity: medium
|
|
|
0d5c10 |
|
|
|
0d5c10 |
-warnings:
|
|
|
0d5c10 |
- - dependency: |-
|
|
|
0d5c10 |
- {{{ body_of_dconf_warning_about_dependent_rule() }}}
|
|
|
0d5c10 |
-
|
|
|
0d5c10 |
identifiers:
|
|
|
0d5c10 |
cce@rhel7: 80108-4
|
|
|
0d5c10 |
|
|
|
0d5c10 |
diff --git a/linux_os/guide/system/software/gnome/gnome_login_screen/dconf_gnome_login_retries/rule.yml b/linux_os/guide/system/software/gnome/gnome_login_screen/dconf_gnome_login_retries/rule.yml
|
|
|
0d5c10 |
index f4eed0d..7b02bc1 100644
|
|
|
0d5c10 |
--- a/linux_os/guide/system/software/gnome/gnome_login_screen/dconf_gnome_login_retries/rule.yml
|
|
|
0d5c10 |
+++ b/linux_os/guide/system/software/gnome/gnome_login_screen/dconf_gnome_login_retries/rule.yml
|
|
|
0d5c10 |
@@ -27,10 +27,6 @@ rationale: |-
|
|
|
0d5c10 |
|
|
|
0d5c10 |
severity: medium
|
|
|
0d5c10 |
|
|
|
0d5c10 |
-warnings:
|
|
|
0d5c10 |
- - dependency: |-
|
|
|
0d5c10 |
- {{{ body_of_dconf_warning_about_dependent_rule() }}}
|
|
|
0d5c10 |
-
|
|
|
0d5c10 |
identifiers:
|
|
|
0d5c10 |
cce@rhel7: 80109-2
|
|
|
0d5c10 |
cce@rhel8: 80771-9
|
|
|
0d5c10 |
diff --git a/linux_os/guide/system/software/gnome/gnome_media_settings/dconf_gnome_disable_automount/rule.yml b/linux_os/guide/system/software/gnome/gnome_media_settings/dconf_gnome_disable_automount/rule.yml
|
|
|
0d5c10 |
index 7caf212..fbf9578 100644
|
|
|
0d5c10 |
--- a/linux_os/guide/system/software/gnome/gnome_media_settings/dconf_gnome_disable_automount/rule.yml
|
|
|
0d5c10 |
+++ b/linux_os/guide/system/software/gnome/gnome_media_settings/dconf_gnome_disable_automount/rule.yml
|
|
|
0d5c10 |
@@ -31,10 +31,6 @@ rationale: |-
|
|
|
0d5c10 |
|
|
|
0d5c10 |
severity: unknown
|
|
|
0d5c10 |
|
|
|
0d5c10 |
-warnings:
|
|
|
0d5c10 |
- - dependency: |-
|
|
|
0d5c10 |
- {{{ body_of_dconf_warning_about_dependent_rule() }}}
|
|
|
0d5c10 |
-
|
|
|
0d5c10 |
identifiers:
|
|
|
0d5c10 |
cce@rhel7: 80122-5
|
|
|
0d5c10 |
|
|
|
0d5c10 |
diff --git a/linux_os/guide/system/software/gnome/gnome_media_settings/dconf_gnome_disable_thumbnailers/rule.yml b/linux_os/guide/system/software/gnome/gnome_media_settings/dconf_gnome_disable_thumbnailers/rule.yml
|
|
|
0d5c10 |
index 6081267..e239b46 100644
|
|
|
0d5c10 |
--- a/linux_os/guide/system/software/gnome/gnome_media_settings/dconf_gnome_disable_thumbnailers/rule.yml
|
|
|
0d5c10 |
+++ b/linux_os/guide/system/software/gnome/gnome_media_settings/dconf_gnome_disable_thumbnailers/rule.yml
|
|
|
0d5c10 |
@@ -30,10 +30,6 @@ rationale: |-
|
|
|
0d5c10 |
|
|
|
0d5c10 |
severity: unknown
|
|
|
0d5c10 |
|
|
|
0d5c10 |
-warnings:
|
|
|
0d5c10 |
- - dependency: |-
|
|
|
0d5c10 |
- {{{ body_of_dconf_warning_about_dependent_rule() }}}
|
|
|
0d5c10 |
-
|
|
|
0d5c10 |
identifiers:
|
|
|
0d5c10 |
cce@rhel7: 80123-3
|
|
|
0d5c10 |
|
|
|
0d5c10 |
diff --git a/linux_os/guide/system/software/gnome/gnome_network_settings/dconf_gnome_disable_wifi_create/rule.yml b/linux_os/guide/system/software/gnome/gnome_network_settings/dconf_gnome_disable_wifi_create/rule.yml
|
|
|
0d5c10 |
index cbfaec0..9b1963b 100644
|
|
|
0d5c10 |
--- a/linux_os/guide/system/software/gnome/gnome_network_settings/dconf_gnome_disable_wifi_create/rule.yml
|
|
|
0d5c10 |
+++ b/linux_os/guide/system/software/gnome/gnome_network_settings/dconf_gnome_disable_wifi_create/rule.yml
|
|
|
0d5c10 |
@@ -24,10 +24,6 @@ rationale: |-
|
|
|
0d5c10 |
|
|
|
0d5c10 |
severity: medium
|
|
|
0d5c10 |
|
|
|
0d5c10 |
-warnings:
|
|
|
0d5c10 |
- - dependency: |-
|
|
|
0d5c10 |
- {{{ body_of_dconf_warning_about_dependent_rule() }}}
|
|
|
0d5c10 |
-
|
|
|
0d5c10 |
identifiers:
|
|
|
0d5c10 |
cce@rhel7: 80118-3
|
|
|
0d5c10 |
|
|
|
0d5c10 |
diff --git a/linux_os/guide/system/software/gnome/gnome_network_settings/dconf_gnome_disable_wifi_notification/rule.yml b/linux_os/guide/system/software/gnome/gnome_network_settings/dconf_gnome_disable_wifi_notification/rule.yml
|
|
|
0d5c10 |
index 51f29ef..09f50e0 100644
|
|
|
0d5c10 |
--- a/linux_os/guide/system/software/gnome/gnome_network_settings/dconf_gnome_disable_wifi_notification/rule.yml
|
|
|
0d5c10 |
+++ b/linux_os/guide/system/software/gnome/gnome_network_settings/dconf_gnome_disable_wifi_notification/rule.yml
|
|
|
0d5c10 |
@@ -24,10 +24,6 @@ rationale: |-
|
|
|
0d5c10 |
Wireless network connections should not be allowed to be configured by general
|
|
|
0d5c10 |
users on a given system as it could open the system to backdoor attacks.
|
|
|
0d5c10 |
|
|
|
0d5c10 |
-warnings:
|
|
|
0d5c10 |
- - dependency: |-
|
|
|
0d5c10 |
- {{{ body_of_dconf_warning_about_dependent_rule() }}}
|
|
|
0d5c10 |
-
|
|
|
0d5c10 |
severity: medium
|
|
|
0d5c10 |
|
|
|
0d5c10 |
identifiers:
|
|
|
0d5c10 |
diff --git a/linux_os/guide/system/software/gnome/gnome_remote_access_settings/dconf_gnome_remote_access_credential_prompt/rule.yml b/linux_os/guide/system/software/gnome/gnome_remote_access_settings/dconf_gnome_remote_access_credential_prompt/rule.yml
|
|
|
0d5c10 |
index a5927e7..872514b 100644
|
|
|
0d5c10 |
--- a/linux_os/guide/system/software/gnome/gnome_remote_access_settings/dconf_gnome_remote_access_credential_prompt/rule.yml
|
|
|
0d5c10 |
+++ b/linux_os/guide/system/software/gnome/gnome_remote_access_settings/dconf_gnome_remote_access_credential_prompt/rule.yml
|
|
|
0d5c10 |
@@ -22,10 +22,6 @@ rationale: |-
|
|
|
0d5c10 |
Username and password prompting is required for remote access. Otherwise, non-authorized
|
|
|
0d5c10 |
and nefarious users can access the system freely.
|
|
|
0d5c10 |
|
|
|
0d5c10 |
-warnings:
|
|
|
0d5c10 |
- - dependency: |-
|
|
|
0d5c10 |
- {{{ body_of_dconf_warning_about_dependent_rule() }}}
|
|
|
0d5c10 |
-
|
|
|
0d5c10 |
severity: medium
|
|
|
0d5c10 |
|
|
|
0d5c10 |
identifiers:
|
|
|
0d5c10 |
diff --git a/linux_os/guide/system/software/gnome/gnome_remote_access_settings/dconf_gnome_remote_access_encryption/rule.yml b/linux_os/guide/system/software/gnome/gnome_remote_access_settings/dconf_gnome_remote_access_encryption/rule.yml
|
|
|
0d5c10 |
index 825348f..101b148 100644
|
|
|
0d5c10 |
--- a/linux_os/guide/system/software/gnome/gnome_remote_access_settings/dconf_gnome_remote_access_encryption/rule.yml
|
|
|
0d5c10 |
+++ b/linux_os/guide/system/software/gnome/gnome_remote_access_settings/dconf_gnome_remote_access_encryption/rule.yml
|
|
|
0d5c10 |
@@ -22,10 +22,6 @@ rationale: |-
|
|
|
0d5c10 |
Open X displays allow an attacker to capture keystrokes and to execute commands
|
|
|
0d5c10 |
remotely.
|
|
|
0d5c10 |
|
|
|
0d5c10 |
-warnings:
|
|
|
0d5c10 |
- - dependency: |-
|
|
|
0d5c10 |
- {{{ body_of_dconf_warning_about_dependent_rule() }}}
|
|
|
0d5c10 |
-
|
|
|
0d5c10 |
severity: medium
|
|
|
0d5c10 |
|
|
|
0d5c10 |
identifiers:
|
|
|
0d5c10 |
diff --git a/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_idle_activation_enabled/rule.yml b/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_idle_activation_enabled/rule.yml
|
|
|
0d5c10 |
index 730844f..82a88d7 100644
|
|
|
0d5c10 |
--- a/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_idle_activation_enabled/rule.yml
|
|
|
0d5c10 |
+++ b/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_idle_activation_enabled/rule.yml
|
|
|
0d5c10 |
@@ -29,10 +29,6 @@ rationale: |-
|
|
|
0d5c10 |
login session does not have administrator rights and the display station is located in a
|
|
|
0d5c10 |
controlled-access area.
|
|
|
0d5c10 |
|
|
|
0d5c10 |
-warnings:
|
|
|
0d5c10 |
- - dependency: |-
|
|
|
0d5c10 |
- {{{ body_of_dconf_warning_about_dependent_rule() }}}
|
|
|
0d5c10 |
-
|
|
|
0d5c10 |
severity: medium
|
|
|
0d5c10 |
|
|
|
0d5c10 |
identifiers:
|
|
|
0d5c10 |
diff --git a/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_idle_activation_locked/rule.yml b/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_idle_activation_locked/rule.yml
|
|
|
0d5c10 |
index da3f041..d2980f0 100644
|
|
|
0d5c10 |
--- a/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_idle_activation_locked/rule.yml
|
|
|
0d5c10 |
+++ b/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_idle_activation_locked/rule.yml
|
|
|
0d5c10 |
@@ -16,10 +16,6 @@ rationale: |-
|
|
|
0d5c10 |
A session lock is a temporary action taken when a user stops work and moves away from the immediate physical vicinity
|
|
|
0d5c10 |
of the information system but does not want to logout because of the temporary nature of the absense.
|
|
|
0d5c10 |
|
|
|
0d5c10 |
-warnings:
|
|
|
0d5c10 |
- - dependency: |-
|
|
|
0d5c10 |
- {{{ body_of_dconf_warning_about_dependent_rule() }}}
|
|
|
0d5c10 |
-
|
|
|
0d5c10 |
severity: medium
|
|
|
0d5c10 |
|
|
|
0d5c10 |
identifiers:
|
|
|
0d5c10 |
diff --git a/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_idle_delay/rule.yml b/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_idle_delay/rule.yml
|
|
|
0d5c10 |
index ac6c968..db8dcbb 100644
|
|
|
0d5c10 |
--- a/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_idle_delay/rule.yml
|
|
|
0d5c10 |
+++ b/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_idle_delay/rule.yml
|
|
|
0d5c10 |
@@ -26,10 +26,6 @@ rationale: |-
|
|
|
0d5c10 |
system session prior to vacating the vicinity, GNOME3 can be configured to identify when
|
|
|
0d5c10 |
a user's session has idled and take action to initiate a session lock.
|
|
|
0d5c10 |
|
|
|
0d5c10 |
-warnings:
|
|
|
0d5c10 |
- - dependency: |-
|
|
|
0d5c10 |
- {{{ body_of_dconf_warning_about_dependent_rule() }}}
|
|
|
0d5c10 |
-
|
|
|
0d5c10 |
severity: medium
|
|
|
0d5c10 |
|
|
|
0d5c10 |
identifiers:
|
|
|
0d5c10 |
diff --git a/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_lock_delay/rule.yml b/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_lock_delay/rule.yml
|
|
|
0d5c10 |
index 42f0d11..a66c458 100644
|
|
|
0d5c10 |
--- a/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_lock_delay/rule.yml
|
|
|
0d5c10 |
+++ b/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_lock_delay/rule.yml
|
|
|
0d5c10 |
@@ -21,10 +21,6 @@ rationale: |-
|
|
|
0d5c10 |
A session lock is a temporary action taken when a user stops work and moves away from the immediate physical vicinity
|
|
|
0d5c10 |
of the information system but does not want to logout because of the temporary nature of the absense.
|
|
|
0d5c10 |
|
|
|
0d5c10 |
-warnings:
|
|
|
0d5c10 |
- - dependency: |-
|
|
|
0d5c10 |
- {{{ body_of_dconf_warning_about_dependent_rule() }}}
|
|
|
0d5c10 |
-
|
|
|
0d5c10 |
severity: medium
|
|
|
0d5c10 |
|
|
|
0d5c10 |
identifiers:
|
|
|
0d5c10 |
diff --git a/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_lock_enabled/rule.yml b/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_lock_enabled/rule.yml
|
|
|
0d5c10 |
index 842bcf4..bf007d3 100644
|
|
|
0d5c10 |
--- a/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_lock_enabled/rule.yml
|
|
|
0d5c10 |
+++ b/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_lock_enabled/rule.yml
|
|
|
0d5c10 |
@@ -21,10 +21,6 @@ rationale: |-
|
|
|
0d5c10 |
A session lock is a temporary action taken when a user stops work and moves away from the immediate physical vicinity
|
|
|
0d5c10 |
of the information system but does not want to logout because of the temporary nature of the absense.
|
|
|
0d5c10 |
|
|
|
0d5c10 |
-warnings:
|
|
|
0d5c10 |
- - dependency: |-
|
|
|
0d5c10 |
- {{{ body_of_dconf_warning_about_dependent_rule() }}}
|
|
|
0d5c10 |
-
|
|
|
0d5c10 |
severity: medium
|
|
|
0d5c10 |
|
|
|
0d5c10 |
identifiers:
|
|
|
0d5c10 |
diff --git a/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_lock_locked/rule.yml b/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_lock_locked/rule.yml
|
|
|
0d5c10 |
index da8cbe7..e6b459a 100644
|
|
|
0d5c10 |
--- a/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_lock_locked/rule.yml
|
|
|
0d5c10 |
+++ b/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_lock_locked/rule.yml
|
|
|
0d5c10 |
@@ -16,10 +16,6 @@ rationale: |-
|
|
|
0d5c10 |
A session lock is a temporary action taken when a user stops work and moves away from the immediate physical vicinity
|
|
|
0d5c10 |
of the information system but does not want to logout because of the temporary nature of the absense.
|
|
|
0d5c10 |
|
|
|
0d5c10 |
-warnings:
|
|
|
0d5c10 |
- - dependency: |-
|
|
|
0d5c10 |
- {{{ body_of_dconf_warning_about_dependent_rule() }}}
|
|
|
0d5c10 |
-
|
|
|
0d5c10 |
severity: medium
|
|
|
0d5c10 |
|
|
|
0d5c10 |
identifiers:
|
|
|
0d5c10 |
diff --git a/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_mode_blank/rule.yml b/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_mode_blank/rule.yml
|
|
|
0d5c10 |
index e792620..c81ee8e 100644
|
|
|
0d5c10 |
--- a/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_mode_blank/rule.yml
|
|
|
0d5c10 |
+++ b/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_mode_blank/rule.yml
|
|
|
0d5c10 |
@@ -21,10 +21,6 @@ rationale: |-
|
|
|
0d5c10 |
Setting the screensaver mode to blank-only conceals the
|
|
|
0d5c10 |
contents of the display from passersby.
|
|
|
0d5c10 |
|
|
|
0d5c10 |
-warnings:
|
|
|
0d5c10 |
- - dependency: |-
|
|
|
0d5c10 |
- {{{ body_of_dconf_warning_about_dependent_rule() }}}
|
|
|
0d5c10 |
-
|
|
|
0d5c10 |
severity: medium
|
|
|
0d5c10 |
|
|
|
0d5c10 |
identifiers:
|
|
|
0d5c10 |
diff --git a/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_user_info/rule.yml b/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_user_info/rule.yml
|
|
|
0d5c10 |
index 3640d34..6ecf953 100644
|
|
|
0d5c10 |
--- a/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_user_info/rule.yml
|
|
|
0d5c10 |
+++ b/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_user_info/rule.yml
|
|
|
0d5c10 |
@@ -23,10 +23,6 @@ rationale: |-
|
|
|
0d5c10 |
Setting the splash screen to not reveal the logged in user's name
|
|
|
0d5c10 |
conceals who has access to the system from passersby.
|
|
|
0d5c10 |
|
|
|
0d5c10 |
-warnings:
|
|
|
0d5c10 |
- - dependency: |-
|
|
|
0d5c10 |
- {{{ body_of_dconf_warning_about_dependent_rule() }}}
|
|
|
0d5c10 |
-
|
|
|
0d5c10 |
severity: medium
|
|
|
0d5c10 |
|
|
|
0d5c10 |
identifiers:
|
|
|
0d5c10 |
diff --git a/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_user_locks/rule.yml b/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_user_locks/rule.yml
|
|
|
0d5c10 |
index 30a29ea..87f690b 100644
|
|
|
0d5c10 |
--- a/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_user_locks/rule.yml
|
|
|
0d5c10 |
+++ b/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_user_locks/rule.yml
|
|
|
0d5c10 |
@@ -19,10 +19,6 @@ rationale: |-
|
|
|
0d5c10 |
GNOME desktops can be configured to identify when a user's session has idled and take action to initiate the
|
|
|
0d5c10 |
session lock. As such, users should not be allowed to change session settings.
|
|
|
0d5c10 |
|
|
|
0d5c10 |
-warnings:
|
|
|
0d5c10 |
- - dependency: |-
|
|
|
0d5c10 |
- {{{ body_of_dconf_warning_about_dependent_rule() }}}
|
|
|
0d5c10 |
-
|
|
|
0d5c10 |
severity: medium
|
|
|
0d5c10 |
|
|
|
0d5c10 |
identifiers:
|
|
|
0d5c10 |
diff --git a/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_session_idle_user_locks/rule.yml b/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_session_idle_user_locks/rule.yml
|
|
|
0d5c10 |
index 9ca213d..0d094ca 100644
|
|
|
0d5c10 |
--- a/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_session_idle_user_locks/rule.yml
|
|
|
0d5c10 |
+++ b/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_session_idle_user_locks/rule.yml
|
|
|
0d5c10 |
@@ -19,10 +19,6 @@ rationale: |-
|
|
|
0d5c10 |
GNOME desktops can be configured to identify when a user's session has idled and take action to initiate the
|
|
|
0d5c10 |
session lock. As such, users should not be allowed to change session settings.
|
|
|
0d5c10 |
|
|
|
0d5c10 |
-warnings:
|
|
|
0d5c10 |
- - dependency: |-
|
|
|
0d5c10 |
- {{{ body_of_dconf_warning_about_dependent_rule() }}}
|
|
|
0d5c10 |
-
|
|
|
0d5c10 |
severity: medium
|
|
|
0d5c10 |
|
|
|
0d5c10 |
identifiers:
|
|
|
0d5c10 |
diff --git a/linux_os/guide/system/software/gnome/gnome_system_settings/dconf_gnome_disable_ctrlaltdel_reboot/rule.yml b/linux_os/guide/system/software/gnome/gnome_system_settings/dconf_gnome_disable_ctrlaltdel_reboot/rule.yml
|
|
|
0d5c10 |
index e7c5054..e1f3a95 100644
|
|
|
0d5c10 |
--- a/linux_os/guide/system/software/gnome/gnome_system_settings/dconf_gnome_disable_ctrlaltdel_reboot/rule.yml
|
|
|
0d5c10 |
+++ b/linux_os/guide/system/software/gnome/gnome_system_settings/dconf_gnome_disable_ctrlaltdel_reboot/rule.yml
|
|
|
0d5c10 |
@@ -26,10 +26,6 @@ rationale: |-
|
|
|
0d5c10 |
the case of mixed OS environment, this can create the risk of short-term
|
|
|
0d5c10 |
loss of availability of systems due to unintentional reboot.
|
|
|
0d5c10 |
|
|
|
0d5c10 |
-warnings:
|
|
|
0d5c10 |
- - dependency: |-
|
|
|
0d5c10 |
- {{{ body_of_dconf_warning_about_dependent_rule() }}}
|
|
|
0d5c10 |
-
|
|
|
0d5c10 |
severity: high
|
|
|
0d5c10 |
|
|
|
0d5c10 |
identifiers:
|
|
|
0d5c10 |
diff --git a/linux_os/guide/system/software/gnome/gnome_system_settings/dconf_gnome_disable_geolocation/rule.yml b/linux_os/guide/system/software/gnome/gnome_system_settings/dconf_gnome_disable_geolocation/rule.yml
|
|
|
0d5c10 |
index 647d024..083d81b 100644
|
|
|
0d5c10 |
--- a/linux_os/guide/system/software/gnome/gnome_system_settings/dconf_gnome_disable_geolocation/rule.yml
|
|
|
0d5c10 |
+++ b/linux_os/guide/system/software/gnome/gnome_system_settings/dconf_gnome_disable_geolocation/rule.yml
|
|
|
0d5c10 |
@@ -29,10 +29,6 @@ rationale: |-
|
|
|
0d5c10 |
Enabling power settings on non-mobile devices could have unintended processing
|
|
|
0d5c10 |
consequences on standard systems.
|
|
|
0d5c10 |
|
|
|
0d5c10 |
-warnings:
|
|
|
0d5c10 |
- - dependency: |-
|
|
|
0d5c10 |
- {{{ body_of_dconf_warning_about_dependent_rule() }}}
|
|
|
0d5c10 |
-
|
|
|
0d5c10 |
severity: medium
|
|
|
0d5c10 |
|
|
|
0d5c10 |
identifiers:
|
|
|
0d5c10 |
diff --git a/linux_os/guide/system/software/gnome/gnome_system_settings/dconf_gnome_disable_power_settings/rule.yml b/linux_os/guide/system/software/gnome/gnome_system_settings/dconf_gnome_disable_power_settings/rule.yml
|
|
|
0d5c10 |
index 5a62042..c983409 100644
|
|
|
0d5c10 |
--- a/linux_os/guide/system/software/gnome/gnome_system_settings/dconf_gnome_disable_power_settings/rule.yml
|
|
|
0d5c10 |
+++ b/linux_os/guide/system/software/gnome/gnome_system_settings/dconf_gnome_disable_power_settings/rule.yml
|
|
|
0d5c10 |
@@ -24,10 +24,6 @@ rationale: |-
|
|
|
0d5c10 |
Enabling power settings on non-mobile devices could have unintended processing
|
|
|
0d5c10 |
consequences on standard systems.
|
|
|
0d5c10 |
|
|
|
0d5c10 |
-warnings:
|
|
|
0d5c10 |
- - dependency: |-
|
|
|
0d5c10 |
- {{{ body_of_dconf_warning_about_dependent_rule() }}}
|
|
|
0d5c10 |
-
|
|
|
0d5c10 |
severity: medium
|
|
|
0d5c10 |
|
|
|
0d5c10 |
identifiers:
|
|
|
0d5c10 |
diff --git a/linux_os/guide/system/software/gnome/gnome_system_settings/dconf_gnome_disable_user_admin/rule.yml b/linux_os/guide/system/software/gnome/gnome_system_settings/dconf_gnome_disable_user_admin/rule.yml
|
|
|
0d5c10 |
index e521d91..28265ac 100644
|
|
|
0d5c10 |
--- a/linux_os/guide/system/software/gnome/gnome_system_settings/dconf_gnome_disable_user_admin/rule.yml
|
|
|
0d5c10 |
+++ b/linux_os/guide/system/software/gnome/gnome_system_settings/dconf_gnome_disable_user_admin/rule.yml
|
|
|
0d5c10 |
@@ -26,10 +26,6 @@ rationale: |-
|
|
|
0d5c10 |
unintended configuration changes as well as a nefarious user the capability to make system
|
|
|
0d5c10 |
changes such as adding new accounts, etc.
|
|
|
0d5c10 |
|
|
|
0d5c10 |
-warnings:
|
|
|
0d5c10 |
- - dependency: |-
|
|
|
0d5c10 |
- {{{ body_of_dconf_warning_about_dependent_rule() }}}
|
|
|
0d5c10 |
-
|
|
|
0d5c10 |
severity: high
|
|
|
0d5c10 |
|
|
|
0d5c10 |
identifiers:
|
|
|
0d5c10 |
diff --git a/ol7/profiles/pci-dss.profile b/ol7/profiles/pci-dss.profile
|
|
|
0d5c10 |
index 8f2a5cc..acfe1be 100644
|
|
|
0d5c10 |
--- a/ol7/profiles/pci-dss.profile
|
|
|
0d5c10 |
+++ b/ol7/profiles/pci-dss.profile
|
|
|
0d5c10 |
@@ -108,7 +108,6 @@ selections:
|
|
|
0d5c10 |
- accounts_passwords_pam_faillock_deny
|
|
|
0d5c10 |
- accounts_passwords_pam_faillock_unlock_time
|
|
|
0d5c10 |
- account_unique_name
|
|
|
0d5c10 |
- - dconf_use_text_backend
|
|
|
0d5c10 |
- dconf_gnome_screensaver_idle_activation_enabled
|
|
|
0d5c10 |
- dconf_gnome_screensaver_idle_delay
|
|
|
0d5c10 |
- dconf_gnome_screensaver_lock_enabled
|
|
|
0d5c10 |
diff --git a/ol7/profiles/stig-ol7-disa.profile b/ol7/profiles/stig-ol7-disa.profile
|
|
|
0d5c10 |
index 0c9cd56..f9d2f4c 100644
|
|
|
0d5c10 |
--- a/ol7/profiles/stig-ol7-disa.profile
|
|
|
0d5c10 |
+++ b/ol7/profiles/stig-ol7-disa.profile
|
|
|
0d5c10 |
@@ -109,7 +109,6 @@ selections:
|
|
|
0d5c10 |
- audit_rules_usergroup_modification_opasswd
|
|
|
0d5c10 |
- audit_rules_usergroup_modification_passwd
|
|
|
0d5c10 |
- audit_rules_usergroup_modification_shadow
|
|
|
0d5c10 |
- - dconf_use_text_backend
|
|
|
0d5c10 |
- dconf_gnome_screensaver_idle_activation_enabled
|
|
|
0d5c10 |
- dconf_gnome_screensaver_idle_activation_locked
|
|
|
0d5c10 |
- dconf_gnome_screensaver_idle_delay
|
|
|
0d5c10 |
diff --git a/ol8/profiles/ospp.profile b/ol8/profiles/ospp.profile
|
|
|
0d5c10 |
index 9309177..9e5b245 100644
|
|
|
0d5c10 |
--- a/ol8/profiles/ospp.profile
|
|
|
0d5c10 |
+++ b/ol8/profiles/ospp.profile
|
|
|
0d5c10 |
@@ -42,7 +42,6 @@ selections:
|
|
|
0d5c10 |
- sysctl_kernel_kptr_restrict
|
|
|
0d5c10 |
- sysctl_kernel_kexec_load_disabled
|
|
|
0d5c10 |
- sysctl_kernel_dmesg_restrict
|
|
|
0d5c10 |
- - dconf_use_text_backend
|
|
|
0d5c10 |
- dconf_gnome_screensaver_idle_activation_enabled
|
|
|
0d5c10 |
- dconf_gnome_screensaver_idle_delay
|
|
|
0d5c10 |
- dconf_gnome_screensaver_lock_delay
|
|
|
0d5c10 |
diff --git a/ol8/profiles/pci-dss.profile b/ol8/profiles/pci-dss.profile
|
|
|
0d5c10 |
index d7d5909..ef6c60f 100644
|
|
|
0d5c10 |
--- a/ol8/profiles/pci-dss.profile
|
|
|
0d5c10 |
+++ b/ol8/profiles/pci-dss.profile
|
|
|
0d5c10 |
@@ -122,7 +122,6 @@ selections:
|
|
|
0d5c10 |
- accounts_passwords_pam_faillock_deny
|
|
|
0d5c10 |
- accounts_passwords_pam_faillock_unlock_time
|
|
|
0d5c10 |
- account_unique_name
|
|
|
0d5c10 |
- - dconf_use_text_backend
|
|
|
0d5c10 |
- dconf_gnome_screensaver_idle_activation_enabled
|
|
|
0d5c10 |
- dconf_gnome_screensaver_idle_delay
|
|
|
0d5c10 |
- dconf_gnome_screensaver_lock_enabled
|
|
|
0d5c10 |
diff --git a/rhel7/profiles/C2S.profile b/rhel7/profiles/C2S.profile
|
|
|
0d5c10 |
index 3d6b4f3..6580595 100644
|
|
|
0d5c10 |
--- a/rhel7/profiles/C2S.profile
|
|
|
0d5c10 |
+++ b/rhel7/profiles/C2S.profile
|
|
|
0d5c10 |
@@ -70,7 +70,6 @@ selections:
|
|
|
0d5c10 |
- selinux_confinement_of_daemons
|
|
|
0d5c10 |
- banner_etc_issue
|
|
|
0d5c10 |
- login_banner_text=usgcb_default
|
|
|
0d5c10 |
- - dconf_use_text_backend
|
|
|
0d5c10 |
- dconf_gnome_login_banner_text
|
|
|
0d5c10 |
- dconf_gnome_banner_enabled
|
|
|
0d5c10 |
- security_patches_up_to_date
|
|
|
0d5c10 |
diff --git a/rhel7/profiles/cjis.profile b/rhel7/profiles/cjis.profile
|
|
|
0d5c10 |
index 1bf4006..a7f8c0b 100644
|
|
|
0d5c10 |
--- a/rhel7/profiles/cjis.profile
|
|
|
0d5c10 |
+++ b/rhel7/profiles/cjis.profile
|
|
|
0d5c10 |
@@ -86,7 +86,6 @@ selections:
|
|
|
0d5c10 |
- var_password_pam_retry=5
|
|
|
0d5c10 |
- var_accounts_passwords_pam_faillock_deny=5
|
|
|
0d5c10 |
- var_accounts_passwords_pam_faillock_unlock_time=600
|
|
|
0d5c10 |
- - dconf_use_text_backend
|
|
|
0d5c10 |
- dconf_gnome_screensaver_idle_delay
|
|
|
0d5c10 |
- dconf_gnome_screensaver_idle_activation_enabled
|
|
|
0d5c10 |
- dconf_gnome_screensaver_lock_enabled
|
|
|
0d5c10 |
diff --git a/rhel7/profiles/hipaa.profile b/rhel7/profiles/hipaa.profile
|
|
|
0d5c10 |
index 719093b..76fb4a8 100644
|
|
|
0d5c10 |
--- a/rhel7/profiles/hipaa.profile
|
|
|
0d5c10 |
+++ b/rhel7/profiles/hipaa.profile
|
|
|
0d5c10 |
@@ -28,7 +28,6 @@ selections:
|
|
|
0d5c10 |
- service_debug-shell_disabled
|
|
|
0d5c10 |
- disable_ctrlaltdel_reboot
|
|
|
0d5c10 |
- disable_ctrlaltdel_burstaction
|
|
|
0d5c10 |
- - dconf_use_text_backend
|
|
|
0d5c10 |
- dconf_gnome_remote_access_credential_prompt
|
|
|
0d5c10 |
- dconf_gnome_remote_access_encryption
|
|
|
0d5c10 |
- sshd_disable_empty_passwords
|
|
|
0d5c10 |
diff --git a/rhel7/profiles/ospp.profile b/rhel7/profiles/ospp.profile
|
|
|
0d5c10 |
index a4357a6..36e5d7e 100644
|
|
|
0d5c10 |
--- a/rhel7/profiles/ospp.profile
|
|
|
0d5c10 |
+++ b/rhel7/profiles/ospp.profile
|
|
|
0d5c10 |
@@ -401,7 +401,6 @@ selections:
|
|
|
0d5c10 |
- network_sniffer_disabled
|
|
|
0d5c10 |
- network_ipv6_disable_rpc
|
|
|
0d5c10 |
- network_ipv6_privacy_extensions
|
|
|
0d5c10 |
- - dconf_use_text_backend
|
|
|
0d5c10 |
- dconf_gnome_banner_enabled
|
|
|
0d5c10 |
- dconf_gnome_disable_automount
|
|
|
0d5c10 |
- dconf_gnome_disable_ctrlaltdel_reboot
|
|
|
0d5c10 |
diff --git a/rhel7/profiles/ospp42.profile b/rhel7/profiles/ospp42.profile
|
|
|
0d5c10 |
index e2173c9..dbd1935 100644
|
|
|
0d5c10 |
--- a/rhel7/profiles/ospp42.profile
|
|
|
0d5c10 |
+++ b/rhel7/profiles/ospp42.profile
|
|
|
0d5c10 |
@@ -42,7 +42,6 @@ selections:
|
|
|
0d5c10 |
- sysctl_kernel_kptr_restrict
|
|
|
0d5c10 |
- sysctl_kernel_kexec_load_disabled
|
|
|
0d5c10 |
- sysctl_kernel_dmesg_restrict
|
|
|
0d5c10 |
- - dconf_use_text_backend
|
|
|
0d5c10 |
- dconf_gnome_screensaver_idle_activation_enabled
|
|
|
0d5c10 |
- dconf_gnome_screensaver_idle_delay
|
|
|
0d5c10 |
- dconf_gnome_screensaver_lock_delay
|
|
|
0d5c10 |
diff --git a/rhel7/profiles/pci-dss.profile b/rhel7/profiles/pci-dss.profile
|
|
|
0d5c10 |
index 7ba7873..da56ff1 100644
|
|
|
0d5c10 |
--- a/rhel7/profiles/pci-dss.profile
|
|
|
0d5c10 |
+++ b/rhel7/profiles/pci-dss.profile
|
|
|
0d5c10 |
@@ -79,7 +79,6 @@ selections:
|
|
|
0d5c10 |
- account_disable_post_pw_expiration
|
|
|
0d5c10 |
- accounts_passwords_pam_faillock_deny
|
|
|
0d5c10 |
- accounts_passwords_pam_faillock_unlock_time
|
|
|
0d5c10 |
- - dconf_use_text_backend
|
|
|
0d5c10 |
- dconf_gnome_screensaver_idle_delay
|
|
|
0d5c10 |
- dconf_gnome_screensaver_idle_activation_enabled
|
|
|
0d5c10 |
- dconf_gnome_screensaver_lock_enabled
|
|
|
0d5c10 |
diff --git a/rhel7/profiles/stig-rhel7-disa.profile b/rhel7/profiles/stig-rhel7-disa.profile
|
|
|
0d5c10 |
index 9f8e9ab..245efd7 100644
|
|
|
0d5c10 |
--- a/rhel7/profiles/stig-rhel7-disa.profile
|
|
|
0d5c10 |
+++ b/rhel7/profiles/stig-rhel7-disa.profile
|
|
|
0d5c10 |
@@ -56,7 +56,6 @@ selections:
|
|
|
0d5c10 |
- rpm_verify_permissions
|
|
|
0d5c10 |
- rpm_verify_ownership
|
|
|
0d5c10 |
- rpm_verify_hashes
|
|
|
0d5c10 |
- - dconf_use_text_backend
|
|
|
0d5c10 |
- dconf_gnome_banner_enabled
|
|
|
0d5c10 |
- dconf_gnome_login_banner_text
|
|
|
0d5c10 |
- banner_etc_issue
|
|
|
0d5c10 |
diff --git a/rhel8/profiles/cjis.profile b/rhel8/profiles/cjis.profile
|
|
|
0d5c10 |
index 288fbf0..ec225d8 100644
|
|
|
0d5c10 |
--- a/rhel8/profiles/cjis.profile
|
|
|
0d5c10 |
+++ b/rhel8/profiles/cjis.profile
|
|
|
0d5c10 |
@@ -86,7 +86,6 @@ selections:
|
|
|
0d5c10 |
- var_password_pam_retry=5
|
|
|
0d5c10 |
- var_accounts_passwords_pam_faillock_deny=5
|
|
|
0d5c10 |
- var_accounts_passwords_pam_faillock_unlock_time=600
|
|
|
0d5c10 |
- - dconf_use_text_backend
|
|
|
0d5c10 |
- dconf_gnome_screensaver_idle_delay
|
|
|
0d5c10 |
- dconf_gnome_screensaver_idle_activation_enabled
|
|
|
0d5c10 |
- dconf_gnome_screensaver_lock_enabled
|
|
|
0d5c10 |
diff --git a/rhel8/profiles/hipaa.profile b/rhel8/profiles/hipaa.profile
|
|
|
0d5c10 |
index f5533f1..d44960d 100644
|
|
|
0d5c10 |
--- a/rhel8/profiles/hipaa.profile
|
|
|
0d5c10 |
+++ b/rhel8/profiles/hipaa.profile
|
|
|
0d5c10 |
@@ -28,7 +28,6 @@ selections:
|
|
|
0d5c10 |
- service_debug-shell_disabled
|
|
|
0d5c10 |
- disable_ctrlaltdel_reboot
|
|
|
0d5c10 |
- disable_ctrlaltdel_burstaction
|
|
|
0d5c10 |
- - dconf_use_text_backend
|
|
|
0d5c10 |
- dconf_gnome_remote_access_credential_prompt
|
|
|
0d5c10 |
- dconf_gnome_remote_access_encryption
|
|
|
0d5c10 |
- sshd_disable_empty_passwords
|
|
|
0d5c10 |
diff --git a/rhel8/profiles/ospp.profile b/rhel8/profiles/ospp.profile
|
|
|
0d5c10 |
index 3c6e193..31b4be5 100644
|
|
|
0d5c10 |
--- a/rhel8/profiles/ospp.profile
|
|
|
0d5c10 |
+++ b/rhel8/profiles/ospp.profile
|
|
|
0d5c10 |
@@ -219,7 +219,6 @@ selections:
|
|
|
0d5c10 |
### FMT_MOF_EXT.1 / AC-11(a)
|
|
|
0d5c10 |
### Enable Screen Lock
|
|
|
0d5c10 |
- package_tmux_installed
|
|
|
0d5c10 |
- - dconf_use_text_backend
|
|
|
0d5c10 |
- dconf_gnome_screensaver_idle_activation_enabled
|
|
|
0d5c10 |
- dconf_gnome_screensaver_idle_delay
|
|
|
0d5c10 |
- dconf_gnome_screensaver_lock_delay
|
|
|
0d5c10 |
diff --git a/rhel8/profiles/pci-dss.profile b/rhel8/profiles/pci-dss.profile
|
|
|
0d5c10 |
index 6b73cd8..3894da0 100644
|
|
|
0d5c10 |
--- a/rhel8/profiles/pci-dss.profile
|
|
|
0d5c10 |
+++ b/rhel8/profiles/pci-dss.profile
|
|
|
0d5c10 |
@@ -98,7 +98,6 @@ selections:
|
|
|
0d5c10 |
- account_disable_post_pw_expiration
|
|
|
0d5c10 |
- accounts_passwords_pam_faillock_deny
|
|
|
0d5c10 |
- accounts_passwords_pam_faillock_unlock_time
|
|
|
0d5c10 |
- - dconf_use_text_backend
|
|
|
0d5c10 |
- dconf_gnome_screensaver_idle_delay
|
|
|
0d5c10 |
- dconf_gnome_screensaver_idle_activation_enabled
|
|
|
0d5c10 |
- dconf_gnome_screensaver_lock_enabled
|