<html>
  <head>
    <meta content="text/html; charset=utf-8" http-equiv="Content-Type">
  </head>
  <body bgcolor="#FFFFFF" text="#000000">
    <div class="moz-cite-prefix">Because we would like to have 2
      different issue files (different content): tty and ssh. <br>
      But guess I have to make a patch then for internal use :-)<br>
      <br>
      - Gerwin<br>
      <br>
      On 01/21/2015 04:02 PM, Gabe Alford wrote:<br>
    </div>
    <blockquote
cite="mid:CAGLxfGwisE5=Fe3LzuKO7kY=odfU0n4wn7_6bhoEj6as4cvg2g@mail.gmail.com"
      type="cite">
      <div dir="ltr">
        <div>Just read this thread.<br>
          <br>
        </div>
        I may be missing something here, but why are you using <a
          moz-do-not-send="true" href="http://issue.net">issue.net</a>
        for SSH banners?<br>
      </div>
      <div class="gmail_extra"><br>
        <div class="gmail_quote">On Wed, Jan 21, 2015 at 7:36 AM,
          Jeremiah Jahn <span dir="ltr">&lt;<a moz-do-not-send="true"
              href="mailto:jeremiah@goodinassociates.com"
              target="_blank">jeremiah@goodinassociates.com</a>&gt;</span>
          wrote:<br>
          <blockquote class="gmail_quote" style="margin:0 0 0
            .8ex;border-left:1px #ccc solid;padding-left:1ex">Nope, I
            don't think I ever did. I'm assuming the principles are so<br>
            overwhelmed, given the current amount of activity, that the
            thing to<br>
            do would be submit your own patch that splits these things
            up into two<br>
            pieces. I got sucked into a different project right now,
            otherwise,<br>
            that's what I'd probably do. Now that everything is on
            github, it's a<br>
            lot easier.<br>
            <div class="HOEnZb">
              <div class="h5"><br>
                On Wed, Jan 21, 2015 at 2:09 AM, Gerwin Krist | LinQhost
                Internet<br>
                Services &lt;<a moz-do-not-send="true"
                  href="mailto:gerwin@linqhost.nl">gerwin@linqhost.nl</a>&gt;
                wrote:<br>
                &gt; Hi,<br>
                &gt;<br>
                &gt; Did you get any response on this one? Only allowing
                /etc/issue is not<br>
                &gt; workable when using<br>
                &gt; both console and ssh logins. The console login is
                accepting escape cookies<br>
                &gt; the ssh version<br>
                &gt; not.<br>
                &gt;<br>
                &gt;<br>
                &gt; On 08/01/2014 10:38 PM, Jeremiah Jahn wrote:<br>
                &gt;&gt;<br>
                &gt;&gt; We used to have to keep out banners under
                /etc/issue for the console,<br>
                &gt;&gt; and /etc/<a moz-do-not-send="true"
                  href="http://issue.net" target="_blank">issue.net</a>
                for remote access.<br>
                &gt;&gt; Would it be okay to make this rule deal with
                either one?<br>
                &gt;&gt;<br>
                &gt;&gt; diff --git
                a/shared/oval/sshd_enable_warning_banner.xml<br>
                &gt;&gt; b/shared/oval/sshd_enable_warning_banner.xml<br>
                &gt;&gt; index 0bd8d32..ace8b75 100644<br>
                &gt;&gt; ---
                a/shared/oval/sshd_enable_warning_banner.xml<br>
                &gt;&gt; +++
                b/shared/oval/sshd_enable_warning_banner.xml<br>
                &gt;&gt; @@ -25,7 +25,7 @@<br>
                &gt;&gt;     &lt;/ind:textfilecontent54_test&gt;<br>
                &gt;&gt;     &lt;ind:textfilecontent54_object
                id="obj_sshd_banner_set" version="2"&gt;<br>
                &gt;&gt;     
                 &lt;ind:filepath&gt;/etc/ssh/sshd_config&lt;/ind:filepath&gt;<br>
                &gt;&gt; -    &lt;ind:pattern operation="pattern<br>
                &gt;&gt;<br>
                &gt;&gt;
match"&gt;^[\s]*(?i)Banner(?-i)[\s]+/etc/issue[\s]*(?:|(?:#.*))?$&lt;/ind:pattern&gt;<br>
                &gt;&gt; +    &lt;ind:pattern operation="pattern<br>
                &gt;&gt;<br>
                &gt;&gt;
match"&gt;^[\s]*(?i)Banner(?-i)[\s]+/etc/issue(.net){0,1}[\s]*(?:|(?:#.*))?$&lt;/ind:pattern&gt;<br>
                &gt;&gt;       &lt;ind:instance
                datatype="int"&gt;1&lt;/ind:instance&gt;<br>
                &gt;&gt;     &lt;/ind:textfilecontent54_object&gt;<br>
                &gt;&gt;   &lt;/def-group&gt;<br>
                &gt;<br>
                &gt;<br>
                --<br>
                SCAP Security Guide mailing list<br>
                <a moz-do-not-send="true"
                  href="mailto:scap-security-guide@lists.fedorahosted.org">scap-security-guide@lists.fedorahosted.org</a><br>
                <a moz-do-not-send="true"
href="https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide"
                  target="_blank">https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide</a><br>
                <a moz-do-not-send="true"
                  href="https://github.com/OpenSCAP/scap-security-guide/"
                  target="_blank">https://github.com/OpenSCAP/scap-security-guide/</a></div>
            </div>
          </blockquote>
        </div>
        <br>
      </div>
    </blockquote>
    <br>
  </body>
</html>