RHEL Engineering is moving the tracking of its product development work on RHEL 6 through RHEL 9 to Red Hat Jira (issues.redhat.com). If you're a Red Hat customer, please continue to file support cases via the Red Hat customer portal. If you're not, please head to the "RHEL project" in Red Hat Jira and file new tickets here. Individual Bugzilla bugs in the statuses "NEW", "ASSIGNED", and "POST" are being migrated throughout September 2023. Bugs of Red Hat partners with an assigned Engineering Partner Manager (EPM) are migrated in late September as per pre-agreed dates. Bugs against components "kernel", "kernel-rt", and "kpatch" are only migrated if still in "NEW" or "ASSIGNED". If you cannot log in to RH Jira, please consult article #7032570. That failing, please send an e-mail to the RH Jira admins at rh-issues@redhat.com to troubleshoot your issue as a user management inquiry. The email creates a ServiceNow ticket with Red Hat. Individual Bugzilla bugs that are migrated will be moved to status "CLOSED", resolution "MIGRATED", and set with "MigratedToJIRA" in "Keywords". The link to the successor Jira issue will be found under "Links", have a little "two-footprint" icon next to it, and direct you to the "RHEL project" in Red Hat Jira (issue links are of type "https://issues.redhat.com/browse/RHEL-XXXX", where "X" is a digit). This same link will be available in a blue banner at the top of the page informing you that that bug has been migrated.
Bug 1506370 - [RFE] disable show text in GDM login screen/lock screen
Summary: [RFE] disable show text in GDM login screen/lock screen
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Red Hat Enterprise Linux 7
Classification: Red Hat
Component: gnome-shell
Version: 7.6
Hardware: Unspecified
OS: Linux
high
high
Target Milestone: rc
: 7.8
Assignee: Ray Strode [halfline]
QA Contact: Desktop QE
URL:
Whiteboard:
Depends On:
Blocks: 1727111
TreeView+ depends on / blocked
 
Reported: 2017-10-25 19:37 UTC by Joe Wright
Modified: 2023-09-07 18:59 UTC (History)
9 users (show)

Fixed In Version: gsettings-desktop-schemas-3.28.0-3.el7 gnome-shell-3.28.3-13.el7
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed: 2020-03-31 19:38:46 UTC
Target Upstream Version:
Embargoed:

Attachments (Terms of Use)
Screenshot from reproducing the bug after component update (250.85 KB, image/png)
2019-08-27 08:56 UTC, Pavlin Georgiev 		no flags Details
View All


Links
System ID Private Priority Status Summary Last Updated
GNOME Gitlab GNOME/gnome-shell/merge_requests/687 0 None None None 2019-08-21 20:36:19 UTC
GNOME Gitlab GNOME/gsettings-desktop-schemas/merge_requests/28 0 None None None 2019-08-21 20:21:42 UTC
Red Hat Knowledge Base (Solution) 3224961 0 None None None 2017-10-25 19:42:48 UTC
Red Hat Product Errata RHSA-2020:1021 0 None None None 2020-03-31 19:39:28 UTC

Internal Links: 1825308

Comment 17 Pavlin Georgiev 2019-08-27 08:56:43 UTC 
Created attachment 1608422 [details]
Screenshot from reproducing the bug after component update
Comment 18 Pavlin Georgiev 2019-08-27 08:59:10 UTC 
TEST SETUP
Distro: RHEL 7.7 Workstation
Component version: 
  gnome-shell-3.28.3-11.el7
  gsettings-desktop-schemas-3.28.0-2.el7


TEST PROCEDURE
1. Download and install Brew builds:
    gnome-shell-3.28.3-13.el7
    gsettings-desktop-schemas-devel-3.28.0-3.el7
    
2. Follow steps from RHEL 7 Desktop Migration and Administration Guide:
   https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/desktop_migration_and_administration_guide/custom-default-values-system-settings#lock-down-specific-settings

3. Create a local database for machine-wide settings.
# cat > /etc/dconf/db/local.d/00-password-policy << EOF
[org/gnome/desktop/lockdown]
disable-show-password=true
EOF

4. Override the user's setting to prevent the user from changing it. 
# cat > /etc/dconf/db/local.d/locks/00-disable-show-password << EOF
/org/gnome/desktop/lockdown/disable-show-password
EOF

5. # dconf update
6. Try to log as user "test". The option "Show password" is not visible.
7. Log in a GNOME session as user test.
8. Try to modify the password policy:
$ dconf write /org/gnome/desktop/lockdown/disable-show-password false
error: The operation attempted to modify one or more non-writable keys

This is the intended behavior.


RESULT
Upgrading component: gnome-shell
    from: 3.28.3-11.el7
      to: 3.28.3-13.el7
Upgrading component: gsettings-desktop-schemas
    from: 3.28.0-2.el7
      to: 3.28.0-3.el7
has fixed the bug.
Comment 20 errata-xmlrpc 2020-03-31 19:38:46 UTC 
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHSA-2020:1021
Comment 21 Rob Hood 2020-04-13 20:12:37 UTC 
I assumed the fix was incorporated into the 7.8 Maipo RHEL7 kernel.  I am unable to disable the "show text" option on the gnome-login screen:

cat > /etc/dconf/db/local.d/00-password-policy << EOF
[org/gnome/desktop/lockdown]
disable-show-password=true
EOF

cat > /etc/dconf/db/local.d/locks/00-disable-show-password << EOF
/org/gnome/desktop/lockdown/disable-show-password true
EOF

dconf update


Tested on (.x86_64):
  Red HAt Enterprise Linux Server release 7.8 (Maipo)
  gnome-shell-3.28.3-24.el7
  gsettings-desktop-schemas-3.28.0-3.el7 
  kernel-3.10.0-1127.el7
Comment 22 Justin VanDeBrake 2020-10-23 22:31:30 UTC 
Working configuration on 7.8 Maipo:

For the login screen:

# cat > /etc/dconf/db/gdm.d/00-login-screen << EOF
[org/gnome/desktop/lockdown]
disable-show-password=true
EOF


For the lockscreen:

# cat > /etc/dconf/db/local.d/00-lockscreen << EOF
[org/gnome/desktop/lockdown]
disable-show-password=true
EOF

# cat > /etc/dconf/db/local.d/locks/00-lockscreen << EOF
/org/gnome/desktop/lockdown/disable-show-password
EOF

Apply the settings:

# dconf update
Note You need to log in before you can comment on or make changes to this bug.