STIGQter: STIG Summary: SLES 12 Security Technical Implementation Guide Version: 2 Release: 3 Benchmark Date: 23 Apr 2021:

The SUSE operating system must conceal, via the session lock, information previously visible on the display with a publicly viewable image in the graphical user interface.

DISA Rule

SV-217111r603262_rule

Vulnerability Number

V-217111

Group Title

SRG-OS-000031-GPOS-00012

Rule Version

SLES-12-010100

Severity

CAT III

CCI(s)

• CCI-000060 - The information system conceals, via the session lock, information previously visible on the display with a publicly viewable image.

Weight

10

Fix Recommendation

Note: If the system does not have X Windows installed, this requirement is Not Applicable.

Configure the SUSE operating system to use a publically viewable image by finding the Settings menu and then navigate to the Background selection section:

- Click "Applications" on the bottom left.
- Hover over "System Tools" with the mouse.
- Click the "Settings" icon under System Tools.
- Click "Background" and then "Lock Screen".
- Set the Lock Screen image to the user's choice.
- Click "Select".
- Exit Settings Dialog.

Check Contents

Verify the SUSE operating system conceals via the session lock information previously visible on the display with a publicly viewable image in the graphical user interface.

Note: If the system does not have a graphical user interface installed, this requirement is Not Applicable.

Check that the lock screen is set to a publicly viewable image by running the following command:

# gsettings get org.gnome.desktop.screensaver picture-uri
'file:///usr/share/wallpapers/SLE-default-static.xml'

If nothing is returned or "org.gnome.desktop.screensaver" is not set, this is a finding.

Vulnerability Number

V-217111

Documentable

False

Rule Version

SLES-12-010100

Severity Override Guidance

Verify the SUSE operating system conceals via the session lock information previously visible on the display with a publicly viewable image in the graphical user interface.

Note: If the system does not have a graphical user interface installed, this requirement is Not Applicable.

Check that the lock screen is set to a publicly viewable image by running the following command:

# gsettings get org.gnome.desktop.screensaver picture-uri
'file:///usr/share/wallpapers/SLE-default-static.xml'

If nothing is returned or "org.gnome.desktop.screensaver" is not set, this is a finding.

Check Content Reference

M

Target Key

4033

Comments