<def-group>
  <definition class="compliance" id="gconf_gdm_disable_user_list" version="1">
    <metadata>
      <title>Disable the User List</title>
      <affected family="unix">
        <platform>Red Hat Enterprise Linux 6</platform>
      </affected>
      <description>Disable the GUI listing of all known users on the login screen.</description>
      <reference source="JL" ref_id="20141113" ref_url="test_attestation" />
    </metadata>
    <criteria operator="OR">
      <extend_definition comment="gdm installed" definition_ref="package_gdm_installed" negate="true" />
      <criterion comment="check etc settings tree" test_ref="test_tree_gconf_gdm_disable_user_list" />
      <criterion comment="check etc settings without tree" test_ref="test_no_tree_gconf_gdm_disable_user_list" />
    </criteria>
  </definition>

  <ind:xmlfilecontent_test check="all" comment="checks for gconf-tree file" id="test_tree_gconf_gdm_disable_user_list" version="1">
    <ind:object object_ref="object_gconf_gdm_disable_user_list_tree" />
    <ind:state state_ref="state_gconf_gdm_disable_user_list" />
  </ind:xmlfilecontent_test>
  <ind:xmlfilecontent_object id="object_gconf_gdm_disable_user_list_tree" version="1">
    <ind:filepath>/etc/gconf/gconf.xml.mandatory/%gconf-tree.xml</ind:filepath>
    <ind:xpath>/gconf/dir/dir/dir/entry[@name='disable_user_list']/@value</ind:xpath>
  </ind:xmlfilecontent_object>

  <ind:xmlfilecontent_test check="all" comment="checks for absent gconf-tree file" id="test_no_tree_gconf_gdm_disable_user_list" version="1">
    <ind:object object_ref="object_gconf_gdm_disable_user_list_no_tree" />
    <ind:state state_ref="state_gconf_gdm_disable_user_list" />
  </ind:xmlfilecontent_test>
  <ind:xmlfilecontent_object id="object_gconf_gdm_disable_user_list_no_tree" version="1">
    <ind:filepath>/etc/gconf/gconf.xml.mandatory/apps/gdm/simple-greeter/%gconf.xml</ind:filepath>
    <ind:xpath>/gconf/entry[@name='disable_user_list']/@value</ind:xpath>
  </ind:xmlfilecontent_object>

  <ind:xmlfilecontent_state id="state_gconf_gdm_disable_user_list" version="1">
    <ind:value_of datatype="string">true</ind:value_of>
  </ind:xmlfilecontent_state>

</def-group>
