STIGQter STIGQter: STIG Summary: Canonical Ubuntu 22.04 LTS Security Technical Implementation Guide Version: 2 Release: 9 Benchmark Date: 01 Jul 2026:

Ubuntu 22.04 LTS must enable the graphical user logon banner to display the Standard Mandatory DOD Notice and Consent Banner before granting local access to the system via a graphical user logon.

DISA Rule

SV-260535r958390_rule

Vulnerability Number

V-260535

Group Title

SRG-OS-000023-GPOS-00006

Rule Version

UBTU-22-271010

Severity

CAT II

CCI(s)

Weight

10

Fix Recommendation

Configure Ubuntu 22.04 LTS to display the Standard Mandatory DOD Notice and Consent Banner before granting access to the operating system via a graphical user logon.

Add or modify the following line in the "/etc/gdm3/greeter.dconf-defaults" file:

[org/gnome/login-screen]
banner-message-enable=true

Update GDM with the new configuration by using the following commands:

$ sudo dconf update
$ sudo systemctl restart gdm3

Check Contents

Verify Ubuntu 22.04 LTS is configured to display the Standard Mandatory DOD Notice and Consent Banner before granting access to the operating system via a graphical user logon by using the following command:

Note: If no graphical user interface is installed, this requirement is not applicable.

$ grep -i banner-message-enable /etc/gdm3/greeter.dconf-defaults
banner-message-enable=true

If the value for "banner-message-enable" is set to "false", the line is commented out, or no value is returned, this is a finding.

Vulnerability Number

V-260535

Documentable

False

Rule Version

UBTU-22-271010

Severity Override Guidance

Verify Ubuntu 22.04 LTS is configured to display the Standard Mandatory DOD Notice and Consent Banner before granting access to the operating system via a graphical user logon by using the following command:

Note: If no graphical user interface is installed, this requirement is not applicable.

$ grep -i banner-message-enable /etc/gdm3/greeter.dconf-defaults
banner-message-enable=true

If the value for "banner-message-enable" is set to "false", the line is commented out, or no value is returned, this is a finding.

Check Content Reference

M

Target Key

5594