search

sealingtech / CLIP

SealingTech's Certifiable Linux Integration Platform
9 stars 12 forks source link

Add support for a GUI in v7.6 #96

Closed sshimko closed 5 years ago

sshimko commented 5 years ago

This adds support for a GNOME/X GUI on RHEL v7.6.

It enables the necessary packages, tries to trim a bunch present in the GUI package groups, applies lockdowns and best practices and labels more dbus services.

There are also some fixes around DONOR_ISO to perform sanity checking and provide more feedback to the user.

sshimko commented 5 years ago

Pushed b2854393ccb5601da9ec60f764f87e30d93b9140 which addresses all of your feedback @d3vilbox and has the following functional changes:

  1. Removes the TMOUT fix from our SCAP content since a bug was fixed upstream.
  2. Fixes our setting of the bootload username to toor. The previous implementation failed to do it so the username was still root.
  3. Fixes policykit auth agent's policy so it can read shadow directly in addition to use unix_chkpwd.