I have different issues with the Gnome checks. The remediation I followed set the blank screensaver, timeout, banner, etc. in /etc/gconf/gconf.xml.mandatory/ but the SSG tests look for these values in /etc/gconf/gconf.xml.defaults
Agreed, though, that if NO Gnome tools are installed at all, these checks should also pass. I've not seen that false positive, but it doesn't surprise me. Andrew On Fri, Aug 2, 2013 at 5:18 AM, Stuart Green <[email protected]>wrote: > > To add specifics: > Set GNOME Login Inactivity Timeout - Failed > GNOME Desktop Screensaver Mandatory Use - Failed > Enable Screen Lock Activation After Idle Period - Failed > Implement Blank Screen Saver - Failed > Install the screen Package - Failed > Enable GUI Warning Banner - Failed > > > Hey All, >> >> Has there been any previous discussion on the Gnome checks? >> >> We run headless installations here so none of the checks are applicable >> to us, but the XCCDF raises fails. I'm not sure if its possible to add a >> check to see if x sessions are enabled perhaps? >> >> Cheers >> Stu >> > > ______________________________**_________________ > scap-security-guide mailing list > scap-security-guide@lists.**fedorahosted.org<[email protected]> > https://lists.fedorahosted.**org/mailman/listinfo/scap-**security-guide<https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide> >
_______________________________________________ scap-security-guide mailing list [email protected] https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide
