STIGQter: STIG Summary: SUSE Linux Enterprise Server 15 Security Technical Implementation Guide Version: 1 Release: 2 Benchmark Date: 23 Apr 2021:

The SUSE operating system must conceal, via the session lock, information previously visible on the display with a publicly viewable image in the graphical user interface (GUI).

DISA Rule

SV-234814r622137_rule

Vulnerability Number

V-234814

Group Title

SRG-OS-000031-GPOS-00012

Rule Version

SLES-15-010140

Severity

CAT III

CCI(s)

• CCI-000060 - The information system conceals, via the session lock, information previously visible on the display with a publicly viewable image.

Weight

10

Fix Recommendation

Note: If the system does not have X Windows installed, this requirement is Not Applicable.

Configure the SUSE operating system to use a publically viewable image by finding the Settings menu and then navigate to the Background selection section:

- Click "Activities" on the top left.
- Click "Show Applications" at the bottom of the Activities menu.
- Click the "Settings" icon.
- Click "Background" from left hand menu.
- Select image and set the Lock Screen image to the user's choice.
- Exit Settings Dialog.

Check Contents

Verify the SUSE operating system conceals via the session lock information previously visible on the display with a publicly viewable image in the GUI.

Note: If the system does not have X Windows installed, this requirement is Not Applicable.

Check that the lock screen is set to a publicly viewable image by running the following command:

> sudo gsettings get org.gnome.desktop.screensaver picture-uri
'file:///usr/share/wallpapers/SLE-default-static.xml'

If nothing is returned or "org.gnome.desktop.screensaver" is not set, this is a finding.

Vulnerability Number

V-234814

Documentable

False

Rule Version

SLES-15-010140

Severity Override Guidance

Verify the SUSE operating system conceals via the session lock information previously visible on the display with a publicly viewable image in the GUI.

Note: If the system does not have X Windows installed, this requirement is Not Applicable.

Check that the lock screen is set to a publicly viewable image by running the following command:

> sudo gsettings get org.gnome.desktop.screensaver picture-uri
'file:///usr/share/wallpapers/SLE-default-static.xml'

If nothing is returned or "org.gnome.desktop.screensaver" is not set, this is a finding.

Check Content Reference

M

Target Key

5274

Comments