lowsystemverified ✓rollback-safe
Ensure remote login warning banner is configured properly
issue-net-configured · RHEL ≥ 8 · 1 impl
Description
The /etc/issue.net file contains the message displayed to users before remote login. It should contain an authorized use warning and not display OS version information. Customize the text by setting the banner_text variable in rules/rules.d/.
Rationale
Displaying a warning banner before login helps establish legal notice that the system is for authorized use only. Removing OS information reduces attack surface information disclosure.
Check → Remediate
Checkfile_content
- path:
- /etc/issue.net
- expected_content:
- {{ banner_text }}
Remediatefile_content
- path:
- /etc/issue.net
- content:
- {{ banner_text }}
- owner:
- root
- group:
- root
- mode:
- 0644
Framework references
CIS
rhel9 1.7.3rhel8 1.7.3rhel10 1.7.3
NIST 800-53
AC-8
Live verification
rhel10:checkrhel8:checkrhel9:check
#banner#issue.net#login#security#ssh