Skip to content
This repository has been archived by the owner on Dec 8, 2020. It is now read-only.

Latest commit

 

History

History
163 lines (130 loc) · 5.68 KB

README.md

File metadata and controls

163 lines (130 loc) · 5.68 KB
Raw

Classification-Banner

Classification Banner is a python script that will display the classification level banner of a session with a variety of configuration options on the primary screen. This script can help government and possibly private customers display a notification that sensitive material is being displayed - for example PII or SECRET Material being processed in a graphical session. The script has been tested on a variety of graphical environments such as GNOME2, GNOME3, KDE, twm, icewm, and Cinnamon.

Python script verified working on RHEL 5/6/7 and Fedora 12-28.

Selecting the classification window and pressing the ESC key will temporarily hide the window for 15 seconds, it will return to view after that

Installation

To install directly from source, run the following command:

python setup.py install

Classification Banner Usage

Options should be placed in the /etc/classification-banner file.

 message        - The classification level to display (Default: 'UNCLASSIFIED')
 fgcolor        - Foreground color of the text to display (Default: '#007A33' "Green")
 bgcolor        - Background color of the banner the text is against (Default: '#FFFFFF' "White")
 face           - Font face to use for the displayed text (Default: 'liberation-sans')
 size           - Size of font to use for text (Default: 'small')
 weight         - Bold or normal (Default: 'bold')
 show_top       - Show top banner (Default: True)
 show_bottom    - Show bottom banner (Default: True)
 spanning       - For multi-montior setups, sets whether one continuous banner stretches across all displays or each individual display has its own banner (Default: False)
 hres           - Manually Set Horiztonal Resolution (OPTIONAL) [ if hres is set, vres required ]
 vres           - Manually Set Horiztonal Resolution (OPTIONAL) [ if vres is set, hres required ]
 opacity        - Sets opacity - for composited window managers only (OPTIONAL) [float - range 0 .. 1] (Default 0.75)
 taskbar_offset - For multi-monitor setups with spanning off, sets an offset in pixels corresponding to the size of a vertically-aligned taskbar, such as a default Ubuntu Gnome environment. This prevents the first display's banner from overlapping in an unsightly way onto the next monitor

Command line options that correspond to the above settings:

 -m, --message
 -f, --fgcolor
 -b, --bgcolor
 --face
 --size
 --weight
 --hide-top
 --hide-bottom
 --spanning
 -x, --hres
 -y, --vres
 -o, --opacity
 --taskbar-offset

Examples

These are examples for the configuration of the Classification Banner using the '/etc/classification-banner' file for various classifications based upon generally accepted color guidelines in the DoD/IC.

Note: The U.S. General Services Administration (GSA) no longer publishes the color values used for printing U.S. Government Standard Forms (SF) such as the SF-710 (Unclassified Label), SF-708 (Confidential Label), SF-707 (Secret Label), SF-706 (Top Secret Label), SF-712 (Classified SCI Label), or SF-709 (Classified Label): http://www.gsa.gov/portal/content/142623

However, archived copies of superseded U.S. Government documents provide the previously published Pantone values as well as a publicly available contract document on gpo.gov:

"GENERAL TERMS, CONDITIONS, AND SPECIFICATIONS For the Procurement of Labels as requisitioned from the U.S. Government Publishing Office (GPO) by the Federal Prison Industries (FPI) Unicor"; U.S. Government Publishing Office; 28 April 2016;

https://www.gpo.gov/docs/default-source/contract-pricing/dallas/ab1724s.pdf

SF-710: Pantone 356 - (Reverse printing) White on Green
SF-708: Pantone 286 - (Reverse printing) White on Blue
SF-707: Pantone 186 - (Reverse printing) White on Red
SF-706: Pantone 165 - (Reverse printing) White on Orange
SF-712: Pantone 101 - Black on Yellow
SF-709: Pantone 264 - Black on Lavender

The following are the approximate RGB and HEX values of the above Pantone Solid Coated values as provided by the Pantone website:

SF-710: RGB:   0, 122,  51 / HEX: #007a33 | https://www.pantone.com/color-finder/356-C
SF-708: RGB:   0,  51, 160 / HEX: #0033a0 | https://www.pantone.com/color-finder/286-C
SF-707: RGB: 200,  16,  46 / HEX: #c8102e | https://www.pantone.com/color-finder/186-C
SF-706: RGB: 255, 103,  31 / HEX: #ff671f | https://www.pantone.com/color-finder/165-C
SF-712: RGB: 247, 234,  72 / HEX: #f7ea48 | https://www.pantone.com/color-finder/101-C
SF-709: RGB: 193, 167, 226 / HEX: #c1a7e2 | https://www.pantone.com/color-finder/264-C

    Default (UNCLASSIFIED)
        
    CONFIDENTIAL
    
        message='CONFIDENTIAL'
	fgcolor='#FFFFFF'
        bgcolor='#0033A0'
    
    SECRET
        
        message='SECRET'
        fgcolor='#FFFFFF'
        bgcolor='#C8102E'
    
    TOP SECRET
        
        message='TOP SECRET'
        fgcolor='#FFFFFF'
        bgcolor='#FF671F'
        
    TOP SECRET//SCI
        
        message='TOP SECRET//SCI'
	fgcolor="#000000'
        bgcolor='#F7EA48'

    CLASSIFIED
    
        message='CLASSIFIED'
        fgcolor="#000000"

Autostart

To auto-start the classification-banner script on the GNOME or KDE Desktop, create the following file:

vi /etc/xdg/autostart/classification-banner.desktop

    [Desktop Entry]
    Name=Classification Banner
    Exec=/usr/local/bin/classification-banner
    Comment=User Notification for Security Level of System.
    Type=Application
    Encoding=UTF-8
    Version=1.0
    MimeType=application/python;
    Categories=Utility;
    X-GNOME-Autostart-enabled=true
    X-KDE-autostart-phase=2
    X-KDE-StartupNotify=false
    StartupNotify=false
    Terminal=false