Skip to content

1.6.1 Ensure message of the day is configured properly

Audit#

Run the following command and verify that the contents match site policy: 

# cat /etc/motd

Run the following command and verify no results are returned: 

# grep -E -i "(\\\v|\\\r|\\\m|\\\s|$(grep '^ID=' /etc/os-release | cut -d= -f2 | sed -e 's/"//g'))" /etc/motd

Remediation#

Edit the /etc/motd file with the appropriate contents according to your site policy, remove any instances of \m , \r , \s , \v or references to the OS platform
- OR -
- IF - the motd is not used, this file can be removed.
Run the following command to remove the motd file: 

# rm /etc/motd