The HYCU virtual appliance must retain the Standard Mandatory DOD Notice and Consent Banner on the screen until the administrator acknowledges the usage conditions and takes explicit actions to log in for further access.

An XCCDF Rule

Description

The banner must be acknowledged by the administrator prior to the device allowing the administrator access to the network device. This provides assurance that the administrator has seen the message and accepted the conditions for access. If the consent banner is not acknowledged by the administrator, DOD will not comply with system use notifications required by law.

ID: SV-268229r1038748_rule
Version: HYCU-ND-000110
Severity: Medium
References: CCI-000050
Updated: about 2 months ago

Remediation Templates

Change the GUI login page welcome message and look of the console/ssh login by following the procedure below:

1. Open a remote session to the HYCU backup controller:
ssh hycu@<HYCUBackupControllerIPAddress>

2. Create the /hycudata/var/branding folder by executing:sudo mkdir -p /hycudata/var/branding

3. Make the following files available in /hycudata/var/branding:
loginImage.PNG/ JPG - Login screen background (1920 x 1440)

console.txt - Pre-login banner for text-based console

sshd.txt - Pre-login banner for SSH access

4. Update the branding configuration by running the following command:
sudo /opt/grizzly/bin/hycu-branding.sh

5. Perform a hard reload of the HYCU Web UI page in the web browser.

The HYCU virtual appliance must retain the Standard Mandatory DOD Notice and Consent Banner on the screen until the administrator acknowledges the usage conditions and takes explicit actions to log in for further access.

Description

Remediation Templates

A Manual Procedure