Skip to content

1.7.3 Ensure remote login warning banner is configured properly

Audit#

Run the following command and verify that the contents match site policy:

# cat /etc/issue.net

Run the following command and verify no results are returned:

# grep -E -i "(\\\v|\\\r|\\\m|\\\s|$(grep '^ID=' /etc/os-release | cut -d= -f2 | sed -e 's/"//g'))" /etc/issue.net

Remediation#

Edit the /etc/issue.net file with the appropriate contents according to your site policy, remove any instances of \m , \r , \s , \v or references to the OS platform

# echo "Authorized uses only. All activity may be monitored and reported." > /etc/issue.net