Enable system security classification banners

You can create a permanent classification banner to state the overall security classification level of the system. This is useful for deployments where the user must always be aware of the security classification level of the system that they are logged into.

About this task

The permanent classification banner can appear within the running session, the lock screen, and login screen, and you can customize its background color, its font, and its position within the screen.

Procedure

  1. Install the gnome-shell-extension-classification-banner package: 
    # dnf install gnome-shell-extension-classification-banner
  2. Create the 99-class-banner file at either of the following locations:
    • To configure a notification at the login screen, create /etc/dconf/db/gdm.d/99-class-banner.
    • To configure a notification in the user session, create /etc/dconf/db/local.d/99-class-banner.
  3. Enter the following configuration in the created file: 
    [org/gnome/shell]
enabled-extensions=['classification-banner@gnome-shell-extensions.gcampax.github.com']

[org/gnome/shell/extensions/classification-banner]
background-color='<rgba(value, value, value, value)>'
message='<your_message>'
top-banner=<true_or_false>
bottom-banner=<true_or_false>
system-info=<true_or_false>
color='<rgb(value, value, value)>'

    To enable multiple extensions, specify all of them in the enabled-extensions list. For example:

    enabled-extensions=['heads-up-display@gnome-shell-extensions.gcampax.github.com', 'classification-banner@gnome-shell-extensions.gcampax.github.com']
  4. Update the dconf database: 
    # dconf update
  5. Reboot the system.
  • If the classification banners are not displayed for an existing user, log in as the user and enable the Classification banner extension by using the Extensions application.