The HYCU VM console must display the Standard Mandatory DoD Notice and Consent Banner before granting access to the device.

An XCCDF Rule

Description

<VulnDiscussion>Display of the DoD-approved use notification before granting access to the network device ensures privacy and security notification verbiage used is consistent with applicable federal laws, Executive Orders, directives, policies, regulations, standards, and guidance.</VulnDiscussion><FalsePositives></FalsePositives><FalseNegatives></FalseNegatives><Documentable>false</Documentable><Mitigations></Mitigations><SeverityOverrideGuidance></SeverityOverrideGuidance><PotentialImpacts></PotentialImpacts><ThirdPartyTools></ThirdPartyTools><MitigationControl></MitigationControl><Responsibility></Responsibility><IAControls></IAControls>

ID: SV-246827r790581_rule
Severity: Medium
References: CCI-000048
Updated: about 1 year ago

The GUI logon page welcome message and look of the logon can be changed by following the procedure below:

1. Open a remote session to the HYCU backup controller:
ssh hycu@<HYCUBackupControllerIPAddress>

2. Copy custom images to the custom-images folder at the following location:/opt/grizzly/www/webapp/resources/

3. Open the "customBranding.json" file from the following location:
/opt/grizzly/www/webapp/

4. In the "customBranding.json file", do the following:
a. To modify the images, specify the names of the custom files added to the custom-images folder. The logon page image recommended size is 1574x1920.
b. To modify the welcome message, replace "customWelcomeTitle" and "customWelcomeSubtitle" with the desired text.

5. Perform a hard reload of the HYCU Web UI page in the web browser.

The console and ssh logon can be configured to display the DoD banner by modifying "/etc/issue" with the required text and editing the "/etc/ssh/sshd_config" file to uncomment the banner keyword and configure it to point to "/etc/issue" as shown below:
banner=/etc/issue

The HYCU VM console must display the Standard Mandatory DoD Notice and Consent Banner before granting access to the device.

Description

Remediation - Manual Procedure