Skip to content
This repository was archived by the owner on Dec 26, 2020. It is now read-only.
This repository was archived by the owner on Dec 26, 2020. It is now read-only.

Make SSH banner path configurable #315

Closed
@liteua

Description

@liteua

Is your feature request related to a problem? Please describe.
Some security implementation guides require warning banners to be consistent across the system:

So, when running openscap audit of the server where sshd is hardened by this role, rule "Enable SSH Warning Banner" fails, as it expects ssh banner path to be '/etc/issue'.

Describe the solution you'd like
It would be nice instead of having '/etc/ssh/banner.txt' hard-coded in the opensshd.conf.j2 template:

Banner {{ '/etc/ssh/banner.txt' if (ssh_banner|bool) else 'none' }}

have a variable like ssh_banner_path for this:

Banner {{ ssh_banner_path if (ssh_banner|bool) else 'none' }}

ssh_banner_path variable default could be set to current path '/etc/ssh/banner.txt'.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions