Bug 2031186

Summary: Classification banners into Gnome login and desktop
Product: Red Hat Enterprise Linux 9 Reporter: Florian Müllner <fmuellner>
Component: gnome-shell-extensionsAssignee: Florian Müllner <fmuellner>
Status: CLOSED ERRATA QA Contact: Michael Boisvert <mboisver>
Severity: medium Docs Contact: Marek Suchánek <msuchane>
Priority: medium    
Version: 9.0CC: aday, amike, awestbro, cschrock, csoriano, debarshir, dking, fmuellner, jadahl, jkoten, jon.wesel, kenyon, linux.duzt, mboisver, mcatanza, mclasen, otaylor, rstrode, sbarcomb, spam544, tpelka, tpopela
Target Milestone: rcKeywords: Reopened, RFE, Triaged
Target Release: ---   
Hardware: All   
OS: All   
Whiteboard:
Fixed In Version: gnome-shell-extensions-40.5-4.el9 Doc Type: Enhancement
Doc Text:
.Security classification banners at login and in the desktop session You can now configure classification banners to state the overall security classification level of the system. This is useful for deployments where the user must be aware of the security classification level of the system that they are logged into. The classification banners can appear in the following contexts, depending on your configuration: * Within the running session * On the lock screen * On the login screen The classification banners can take the form of either a notification that you can dismiss, or a permanent banner. For more information, see link:https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/using_the_desktop_environment_in_rhel_8/assembly_displaying-the-system-security-classification_using-the-desktop-environment-in-rhel-8[Displaying the system security classification].
 Story Points: ---
Clone Of: 1751336 Environment:
Last Closed: 2022-05-17 12:32:42 UTC Type: Epic
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On: 1751336    
Bug Blocks:    

Comment 1 Michael Boisvert 2021-12-15 18:33:53 UTC 
Using gnome-shell-extensions-40.5-4.el9, you can easily program a classification banner within the running session, lock screen and the login screen.

To create a banner in the session and lock screen simply install the extension then customize the extension using one of the many ways, it works perfectly using the Extensions Flatpak.

To create an orange bottom only banner with white text on the login screen do the following (obviously this can be tailored by the user):

1. Install gnome-shell-extension-classification-banner-40.5-4.el9 and gnome-shell-40.7-1.el9
2. Create file called /etc/dconf/db/gdm.d/99-class-banner

[org/gnome/shell]
enabled-extensions=['classification-banner.github.com']

[org/gnome/shell/extensions/classification-banner]
background-color='rgba(255,103,31,0.75)'
message='TOP SECRET'
top-banner=false
bottom-banner=true
system-info=false
color='#fff'

3. dconf update as root
4. reboot
Comment 10 errata-xmlrpc 2022-05-17 12:32:42 UTC 
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (new packages: gnome-shell-extensions), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2022:2340