Gui login banner

[Ratzie]

For security reasons we need to add authorization banners to all servers.
SSH is easy, but how/where do you set it for GUI login?

[Pete Randall]

I'm going to assume that you mean the CDE environment when you say GUI login. If that's true, you would want to change the greeting string in /usr/dt/config/C/Xresources. You might also want to change /etc/issue.


Pete

[Robert-Jan Goossens_1]

Hi,

Have a look at this doc for more info.

http://docs.hp.com/en/B1171-90162/ch01s06.html

CDE - To Change the Welcome Message

Regards,
Robert-Jan

[Ratzie]

Right from the CIS handbook.
#!/bin/sh
banner="Authorized users only."
for file in /usr/dt/config/*/Xresources; do
dir="$(dirname "$file" | sed 's|^/usr/|/etc/|')"
mkdir -p "$dir"
if [ ! -f "$dir/Xresources" ]; then
cp .p "$file" "$dir/Xresources"
fi
echo "Dtlogin*greeting.labelString: $banner" \
>> "$dir/Xresources"
echo "Dtlogin*greeting.persLabelString: $banner" \
>> "$dir/Xresources"
done
chown root:sys /etc/dt/config/*/Xresources
chmod 644 /etc/dt/config/*/Xresources