This repository was archived by the owner on Dec 26, 2020. It is now read-only.
This repository was archived by the owner on Dec 26, 2020. It is now read-only.
Make SSH banner path configurable #315
Closed
Description
Is your feature request related to a problem? Please describe.
Some security implementation guides require warning banners to be consistent across the system:
So, when running openscap audit of the server where sshd is hardened by this role, rule "Enable SSH Warning Banner" fails, as it expects ssh banner path to be '/etc/issue'.
Describe the solution you'd like
It would be nice instead of having '/etc/ssh/banner.txt' hard-coded in the opensshd.conf.j2 template:
Banner {{ '/etc/ssh/banner.txt' if (ssh_banner|bool) else 'none' }}
have a variable like ssh_banner_path
for this:
Banner {{ ssh_banner_path if (ssh_banner|bool) else 'none' }}
ssh_banner_path
variable default could be set to current path '/etc/ssh/banner.txt'.
Metadata
Metadata
Assignees
Labels
No labels