{"description": "By default when the screen is locked, the splash shield will show the user's\nfull name. This should be disabled to prevent casual observers from seeing\nwho has access to the system. This can be disabled by adding or setting\n<tt>show-full-name-in-top-bar</tt> to <tt>false</tt> in\n<tt>/etc/dconf/db/local.d/00-security-settings</tt>. For example:\n<pre>[org/gnome/desktop/screensaver]\nshow-full-name-in-top-bar=false\n</pre>\nOnce the settings have been added, add a lock to\n<tt>/etc/dconf/db/local.d/locks/00-security-settings-lock</tt> to prevent user modification.\nFor example:\n<pre>/org/gnome/desktop/screensaver/show-full-name-in-top-bar</pre>\nAfter the settings have been set, run <tt>dconf update</tt>.", "rationale": "Setting the splash screen to not reveal the logged in user's name\nconceals who has access to the system from passersby.", "severity": "medium", "references": {}, "control_references": {}, "components": [], "identifiers": {}, "ocil_clause": "it is not set or configured properly", "ocil": "To ensure the splash screen is configured not to show user name, run the following command:\n<pre>$ gsettings get org.gnome.desktop.screensaver show-full-name-in-top-bar</pre>\nIf properly configured, the output should be <tt>false</tt>.\nTo ensure that users cannot enable user name on the lock screen, run the following:\n<pre>$ grep show-full-name-in-top-bar /etc/dconf/db/local.d/locks/*</pre>\nIf properly configured, the output should be <tt>/org/gnome/desktop/screensaver/show-full-name-in-top-bar</tt>", "oval_external_content": null, "fixtext": "", "checktext": "", "vuldiscussion": "", "srg_requirement": "", "warnings": [], "conflicts": [], "requires": [], "policy_specific_content": {}, "platform": null, "platforms": [], "sce_metadata": {}, "inherited_platforms": ["package[gdm]"], "cpe_platform_names": [], "inherited_cpe_platform_names": ["package_gdm"], "bash_conditional": null, "fixes": {}, "title": "Disable Full User Name on Splash Shield", "definition_location": "/aptdata/openscap/scap-security-guide/linux_os/guide/system/software/gnome/gnome_screen_locking/dconf_gnome_screensaver_user_info/rule.yml", "template": null}