Setup guide

openssl passwd -salt <xx> <password>

A hash of the password will be displayed after executing the command.

4. Type or paste the password hash where the asterisk was deleted in step 2.

5. Exit, saving changes.

3.9 Logon Warning Banners

A logon banner can be used to provide notice of the system’s ownership, give legal

warning to unauthorized users, and remind authorized users of their consent to

monitoring. The text displayed in the logon banner should be determined by site

policy. Warning banners should be displayed on all systems.

Banners should be provided to anyone logging onto the system. To provide a logon

warning banner to any local (GUI) users:

1. Open the file

/Library/Preferences/com.apple.loginwindow.plist

as an administrator.

2. Immeditately after the <dict> tag, add new lines with a <key> and

<string> entry, as show below in bold. The new <key> tag must contain

LoginwindowText, but the new <string> can contain whatever warning

banner has been indicated by site policy.

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST

1.0//EN" "http://www.apple.com/DTDs/PropertyList-

1.0.dtd">

<dict>

<key>LoginwindowText</key>

<string>THIS IS A DEPARTMENT OF DEFENSE COMPUTER

SYSTEM. USE OF THE SYSTEM IMPLIES CONSENT TO

MONITORING. ANY UNAUTHORIZED USE OF THE SYSTEM WILL

BE PROSECUTED.

</string>

...

3. Exit, saving changes. The warning banner should appear for the next

person logging into the GUI.

UNCLASSIFIED