STIGQter: STIG Summary: Canonical Ubuntu 24.04 LTS Security Technical Implementation Guide Version: 1 Release: 6 Benchmark Date: 01 Jul 2026:

Ubuntu 24.04 LTS must enable the graphical user logon banner to display the Standard Mandatory DOD Notice and Consent Banner before granting local access to the system via a graphical user logon.

DISA Rule

SV-270692r1066565_rule

Vulnerability Number

V-270692

Group Title

SRG-OS-000023-GPOS-00006

Rule Version

UBTU-24-200650

Severity

CAT II

CCI(s)

CCI-000048 - Display an organization-defined system use notification message or banner to users before granting access to the system that provides privacy and security notices consistent with applicable federal laws, Executive Orders, directives, policies, regulations, standards, and guidelines.

Weight

Fix Recommendation

Configure Ubuntu 24.04 LTS to display the Standard Mandatory DOD Notice and Consent Banner before granting access to Ubuntu 24.04 LTS via a graphical user logon.

Edit the "/etc/gdm3/greeter.dconf-defaults" file.

Look for the "banner-message-enable" parameter under the "[org/gnome/login-screen]" section and uncomment it (remove the leading "#" characters):
[org/gnome/login-screen]
banner-message-enable=true

Update the GDM with the new configuration:

$ sudo dconf update
$ sudo systemctl restart gdm3

Check Contents

Note: If the system does not have a graphical user interface installed, this requirement is not applicable.

Verify Ubuntu 24.04 LTS is configured to display the Standard Mandatory DOD Notice and Consent Banner before granting access to Ubuntu 24.04 LTS via a graphical user logon with the following command:

$ grep ^banner-message-enable /etc/gdm3/greeter.dconf-defaults
banner-message-enable=true

If the value for "banner-message-enable" is set to "false", the line is commented out, or no value is returned, this is a finding.

Vulnerability Number

V-270692

Documentable

False

Rule Version

UBTU-24-200650

Severity Override Guidance

Check Content Reference

Target Key

5673